Описание
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the accounts-daemon process.
Отчет
Red Hat Enterprise Linux is not affected. The accountsservice versions shipped in RHEL do not include the systemd-homed SetIconFile code path introduced in later upstream releases.
Меры по смягчению последствий
Avoid using systemd-homed-managed accounts on systems running a vulnerable accountsservice build.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | accountsservice | Fix deferred | ||
| Red Hat Enterprise Linux 7 | accountsservice | Out of support scope | ||
| Red Hat Enterprise Linux 8 | accountsservice | Fix deferred | ||
| Red Hat Enterprise Linux 9 | accountsservice | Fix deferred |
Показывать по
Дополнительная информация
Статус:
5.5 Medium
CVSS3
Связанные уязвимости
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the accounts-daemon process.
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the accounts-daemon process.
A flaw was found in accountsservice. The systemd-homed code path for S ...
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the accounts-daemon process.
5.5 Medium
CVSS3