8.1
High
CVE-2023-3297 In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice…
Description
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AccountService 23.13 | earliest → < 23.13.9-2ubuntu2 | 23.13.9-2ubuntu2 |