Bug 2218566 (CVE-2023-3297)

Summary: CVE-2023-3297 accountsservice: use-after-free via a D-Bus message to the accounts-daemon process
Product: [Other] Security Response Reporter: Guilherme de Almeida Suckevicz <gsuckevi>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED NOTABUG QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: rstrode
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
A vulnerability was found in accountsservice. An unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process. Though exploitation is likely to be difficult, this issue could enable a local unprivileged attacker to gain root privileges.
 Story Points: ---
Clone Of: Environment:
Last Closed: 2023-06-30 19:16:46 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2218567, 2218581, 2218582, 2218583, 2218584, 2218585, 2218822, 2218823, 2218824, 2218825, 2218826, 2218827, 2218828    
Bug Blocks: 2218568    

Description Guilherme de Almeida Suckevicz 2023-06-29 14:14:49 UTC 
An unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

References:
https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/2024182
https://packetstormsecurity.com/files/173189/USN-6190-1.txt
Comment 1 Guilherme de Almeida Suckevicz 2023-06-29 14:15:04 UTC 
Created accountsservice tracking bugs for this issue:

Affects: fedora-all [bug 2218567]