Kevin Backhouse discovered that AccountsService incorrectly dropped privileges. A local user could possibly use this issue to cause AccountsService to crash or hang, resulting in a denial of service. (CVE-2020-16126)
Kevin Backhouse discovered that AccountsService incorrectly handled reading .pam_environment files. A local user could possibly use this issue to cause AccountsService to crash or hang, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2020-16127)
Matthias Gerstner discovered that AccountsService incorrectly handled certain path checks. A local attacker could possibly use this issue to read arbitrary files. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-14036)
{ "binaries": [ { "binary_name": "accountsservice", "binary_version": "0.6.40-2ubuntu11.6" }, { "binary_name": "accountsservice-dbgsym", "binary_version": "0.6.40-2ubuntu11.6" }, { "binary_name": "gir1.2-accountsservice-1.0", "binary_version": "0.6.40-2ubuntu11.6" }, { "binary_name": "gir1.2-accountsservice-1.0-dbgsym", "binary_version": "0.6.40-2ubuntu11.6" }, { "binary_name": "libaccountsservice-dbg", "binary_version": "0.6.40-2ubuntu11.6" }, { "binary_name": "libaccountsservice-dev", "binary_version": "0.6.40-2ubuntu11.6" }, { "binary_name": "libaccountsservice-dev-dbgsym", "binary_version": "0.6.40-2ubuntu11.6" }, { "binary_name": "libaccountsservice-doc", "binary_version": "0.6.40-2ubuntu11.6" }, { "binary_name": "libaccountsservice0", "binary_version": "0.6.40-2ubuntu11.6" }, { "binary_name": "libaccountsservice0-dbgsym", "binary_version": "0.6.40-2ubuntu11.6" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "accountsservice", "binary_version": "0.6.45-1ubuntu1.3" }, { "binary_name": "accountsservice-dbgsym", "binary_version": "0.6.45-1ubuntu1.3" }, { "binary_name": "gir1.2-accountsservice-1.0", "binary_version": "0.6.45-1ubuntu1.3" }, { "binary_name": "libaccountsservice-dev", "binary_version": "0.6.45-1ubuntu1.3" }, { "binary_name": "libaccountsservice-doc", "binary_version": "0.6.45-1ubuntu1.3" }, { "binary_name": "libaccountsservice0", "binary_version": "0.6.45-1ubuntu1.3" }, { "binary_name": "libaccountsservice0-dbgsym", "binary_version": "0.6.45-1ubuntu1.3" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "accountsservice", "binary_version": "0.6.55-0ubuntu12~20.04.4" }, { "binary_name": "accountsservice-dbgsym", "binary_version": "0.6.55-0ubuntu12~20.04.4" }, { "binary_name": "gir1.2-accountsservice-1.0", "binary_version": "0.6.55-0ubuntu12~20.04.4" }, { "binary_name": "libaccountsservice-dev", "binary_version": "0.6.55-0ubuntu12~20.04.4" }, { "binary_name": "libaccountsservice-doc", "binary_version": "0.6.55-0ubuntu12~20.04.4" }, { "binary_name": "libaccountsservice0", "binary_version": "0.6.55-0ubuntu12~20.04.4" }, { "binary_name": "libaccountsservice0-dbgsym", "binary_version": "0.6.55-0ubuntu12~20.04.4" } ], "availability": "No subscription required" }