CVE-2023-3297

Updated: 2023-11-04 20:53:06.574597

Description:

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated
Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Not Vulnerable 2023-10-09 09:36:34
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.8 HIGH Not Vulnerable 2023-10-09 09:36:35
Ubuntu 18.04 ELS linux 4.15.0 7.8 HIGH Not Vulnerable 2023-10-09 09:36:34