USN-6190-1: AccountsService vulnerability
28 June 2023
AccountsService could be made to crash or run programs if it received specially crafted messages.
Releases
Packages
- accountsservice - query and manipulate user account information
Details
Kevin Backhouse discovered that AccountsService incorrectly handled certain
D-Bus messages. A local attacker could use this issue to cause
AccountsService to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.04
Ubuntu 22.10
Ubuntu 22.04
Ubuntu 20.04
After a standard system update you need to reboot your computer to make all
the necessary changes.
References
Related notices
- USN-6190-2: libaccountsservice-doc, libpam-pin, libaccountsservice-dev, gir1.2-accountsservice-1.0, libaccountsservice0, accountsservice