Ubuntu AccountsService Privilege Dropping Vulnerability Allowing Denial-of-Service

A vulnerability in the AccountsService package on Ubuntu has been identified, where the application incorrectly manages user privileges. This flaw can lead to the creation of the .pam_environment file with root ownership, instead of the current user. As a result, a local user might exploit this issue, causing AccountsService to crash or become unresponsive, which disrupts normal service operation.

Impact

Exploitation of this vulnerability can cause AccountsService to crash or stop responding, leading to a denial-of-service condition.

Remediation

Users can update their system to the AccountsService version 22.07.5-2ubuntu1.3 to address this vulnerability. After updating, a system reboot is required to apply the changes.