// For flags

CVE-2023-3297

 

Severity Score

7.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

en Ubuntu AccountsService un atacante local no privilegiado puede desencadenar una vulnerabilidad de uso de memoria previamente liberada en accountsservice enviando mensajes D-Bus al accounts-daemon process.

*Credits: Kevin Backhouse
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
Poc
Automatable
No
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2023-06-16 CVE Reserved
  • 2023-06-28 CVE Published
  • 2023-09-08 EPSS Updated
  • 2024-09-30 CVE Updated
  • 2024-09-30 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-416: Use After Free
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Canonical
Search vendor "Canonical"
Accountsservice
Search vendor "Canonical" for product "Accountsservice"
< 23.13.9-2ubuntu2
Search vendor "Canonical" for product "Accountsservice" and version " < 23.13.9-2ubuntu2"
-
Affected
in Linux
Search vendor "Linux"
Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
--
Safe
Canonical
Search vendor "Canonical"
Accountsservice
Search vendor "Canonical" for product "Accountsservice"
< 22.08.8-1ubuntu7.1
Search vendor "Canonical" for product "Accountsservice" and version " < 22.08.8-1ubuntu7.1"
-
Affected
in Canonical
Search vendor "Canonical"
Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
23.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "23.04"
-
Safe
Canonical
Search vendor "Canonical"
Accountsservice
Search vendor "Canonical" for product "Accountsservice"
< 22.08.8-1ubuntu7.1
Search vendor "Canonical" for product "Accountsservice" and version " < 22.08.8-1ubuntu7.1"
-
Affected
in Canonical
Search vendor "Canonical"
Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
22.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "22.10"
-
Safe
Canonical
Search vendor "Canonical"
Accountsservice
Search vendor "Canonical" for product "Accountsservice"
< 22.07.5-2ubuntu1.4
Search vendor "Canonical" for product "Accountsservice" and version " < 22.07.5-2ubuntu1.4"
-
Affected
in Canonical
Search vendor "Canonical"
Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
22.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "22.04"
lts
Safe
Canonical
Search vendor "Canonical"
Accountsservice
Search vendor "Canonical" for product "Accountsservice"
< 0.6.55-0ubuntu12\~20.04.6
Search vendor "Canonical" for product "Accountsservice" and version " < 0.6.55-0ubuntu12\~20.04.6"
-
Affected
in Canonical
Search vendor "Canonical"
Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
20.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "20.04"
lts
Safe
Canonical
Search vendor "Canonical"
Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
20.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "20.04"
lts
Affected
Canonical
Search vendor "Canonical"
Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
22.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "22.04"
lts
Affected
Canonical
Search vendor "Canonical"
Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
22.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "22.10"
-
Affected
Canonical
Search vendor "Canonical"
Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
23.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "23.04"
-
Affected