IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
5.5Mittel

CVE-2022-1804Accountsservice incorrectly drops privileges

Ubuntu Linux Veröffentlicht: (vor 1 Jahr)

Beschreibung

accountsservice no longer drops permissions when writting .pam_environment

Schwachstellentyp (CWE): CWE-269

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
canonical accountsservice < 22.07.5-2ubuntu1.3
canonical ubuntu linux 22.04
Ubuntu Linux 0.6.55-3ubuntu1 – < 22.07.5-2ubuntu1.3

Referenzen und Patches

CPE-Treffer (NVD) (2)
  • cpe:2.3:a:canonical:accountsservice:*:*:*:*:*:*:*:* < 22.07.5-2ubuntu1.3
  • cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*

Neue CVEs im selben Produkt — Ubuntu 22.04 LTS

7.7Hoch
CVE-2026-109518

APT RCE via hard link reuse

Debian APT; Ubuntu APT

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into install…

7.8Hoch
CVE-2026-114148

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

Ohne Score
CVE-2026-98912

ALSA: seq: oss: Reject reads that cannot fit the next event

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_oss_read() checks whether the next queued OSS sequencer event fits in the remaining userspace buffer before removing it f…

7.5Hoch
CVE-2026-98911

dpaa2-switch: fix the error path in dpaa2_switch_rx()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect sinc…

Ohne Score
CVE-2026-98907

btrfs: protect sb_write_pointer() with invalidate lock

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate lock sb_write_pointer() reads the super block from the block device page cache using read_cache_page_gfp(). This has the same race with BLK…