Security Advisory

CVE-2023-3297

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-09-01 20:49:43
Last updated 2024-09-30 20:19:08
Assigner canonical
CVSS score 8.1
State PUBLISHED

Description

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.