{"id":"CVE-2023-3297","aliases":["AZL-43453","AZL-44259","CLSA-2026-1787732137","EUVD-2023-43972","GHSA-gr7p-26mx-9pgw","UBUNTU-CVE-2023-3297","USN-6190-1","USN-6190-2"],"status":"published","title":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free...","description":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0033,"percentile":0.26385,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-06-28T12:00:00Z","modified":"2026-10-26T09:32:03Z","fixes":[{"ecosystem":"Azure Linux:3","package":"accountsservice","fixed_in":["23.13.9-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"accountsservice","fixed_in":["0.6.45-1ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gir1.2-accountsservice-1.0","fixed_in":["0.6.45-1ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libaccountsservice-dev","fixed_in":["0.6.45-1ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libaccountsservice-doc","fixed_in":["0.6.45-1ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libaccountsservice0","fixed_in":["0.6.45-1ubuntu1.3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"accountsservice","fixed_in":["0.6.35-0ubuntu7.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"accountsservice","fixed_in":["0.6.40-2ubuntu11.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"accountsservice","fixed_in":["0.6.45-1ubuntu1.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"accountsservice","fixed_in":["0.6.55-0ubuntu12~20.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"accountsservice","fixed_in":["22.07.5-2ubuntu1.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.6.55-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.13.9-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.45-1ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gir1.2-accountsservice-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.45-1ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libaccountsservice-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.45-1ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libaccountsservice-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.45-1ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libaccountsservice0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.45-1ubuntu1.3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.35-0ubuntu7.3+esm3"}]}],"versions":["0.6.34-0ubuntu6","0.6.34-0ubuntu7","0.6.35-0ubuntu1","0.6.35-0ubuntu2","0.6.35-0ubuntu3","0.6.35-0ubuntu4","0.6.35-0ubuntu5","0.6.35-0ubuntu6","0.6.35-0ubuntu7","0.6.35-0ubuntu7.1","0.6.35-0ubuntu7.2","0.6.35-0ubuntu7.3","0.6.35-0ubuntu7.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.40-2ubuntu11.6+esm1"}]}],"versions":["0.6.40-2ubuntu5","0.6.40-2ubuntu6","0.6.40-2ubuntu7","0.6.40-2ubuntu8","0.6.40-2ubuntu9","0.6.40-2ubuntu10","0.6.40-2ubuntu11","0.6.40-2ubuntu11.1","0.6.40-2ubuntu11.2","0.6.40-2ubuntu11.3","0.6.40-2ubuntu11.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.45-1ubuntu1.3+esm1"}]}],"versions":["0.6.42-0ubuntu3","0.6.42-0ubuntu4","0.6.45-1ubuntu1","0.6.45-1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.55-0ubuntu12~20.04.6"}]}],"versions":["0.6.55-0ubuntu10","0.6.55-0ubuntu11","0.6.55-0ubuntu12~20.04.1","0.6.55-0ubuntu12~20.04.2","0.6.55-0ubuntu12~20.04.4","0.6.55-0ubuntu12~20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.07.5-2ubuntu1.4"}]}],"versions":["0.6.55-0ubuntu14","0.6.55-3ubuntu1","0.6.55-3ubuntu2","0.6.55-3ubuntu4","0.6.55-3ubuntu5","0.6.55-3ubuntu6","22.07.5-2ubuntu1","22.07.5-2ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.55-0ubuntu12~20.04.6"}]}],"versions":["0.6.55-0ubuntu10","0.6.55-0ubuntu11","0.6.55-0ubuntu12~20.04.1","0.6.55-0ubuntu12~20.04.2","0.6.55-0ubuntu12~20.04.4","0.6.55-0ubuntu12~20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.07.5-2ubuntu1.4"}]}],"versions":["0.6.55-0ubuntu14","0.6.55-3ubuntu1","0.6.55-3ubuntu2","0.6.55-3ubuntu4","0.6.55-3ubuntu5","0.6.55-3ubuntu6","22.07.5-2ubuntu1","22.07.5-2ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.35-0ubuntu7.3+esm3"}]}],"versions":["0.6.34-0ubuntu6","0.6.34-0ubuntu7","0.6.35-0ubuntu1","0.6.35-0ubuntu2","0.6.35-0ubuntu3","0.6.35-0ubuntu4","0.6.35-0ubuntu5","0.6.35-0ubuntu6","0.6.35-0ubuntu7","0.6.35-0ubuntu7.1","0.6.35-0ubuntu7.2","0.6.35-0ubuntu7.3","0.6.35-0ubuntu7.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.40-2ubuntu11.6+esm1"}]}],"versions":["0.6.40-2ubuntu5","0.6.40-2ubuntu6","0.6.40-2ubuntu7","0.6.40-2ubuntu8","0.6.40-2ubuntu9","0.6.40-2ubuntu10","0.6.40-2ubuntu11","0.6.40-2ubuntu11.1","0.6.40-2ubuntu11.2","0.6.40-2ubuntu11.3","0.6.40-2ubuntu11.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.45-1ubuntu1.3+esm1"}]}],"versions":["0.6.42-0ubuntu3","0.6.42-0ubuntu4","0.6.45-1ubuntu1","0.6.45-1ubuntu1.3"]}],"products":[{"vendor":"canonical","product":"accountsservice"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"canonical ltd.","product":"accountservice"}],"references":[{"url":"https://ubuntu.com/security/notices/USN-6190-1","tags":["vendor-advisory","x_transferred","Vendor Advisory","advisory"]},{"url":"https://securitylab.github.com/advisories/GHSL-2023-139_accountsservice/","tags":["third-party-advisory","technical-description","x_transferred","Exploit","Third Party Advisory","report"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/2024182","tags":["issue-tracking","x_transferred","Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3297","tags":["issue-tracking","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3297","tags":["web","advisory"]},{"url":"https://securitylab.github.com/advisories/GHSL-2023-139_accountsservice"},{"url":"https://github.com/advisories/GHSA-gr7p-26mx-9pgw"},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787732137.html","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-3297","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6190-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3297","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-3297","description":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.","status":"published","published":"2023-09-01T20:49:43.576Z","modified":"2024-09-30T20:19:08.943Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:35:24.707957Z"}],"euvd":[{"id":"EUVD-2023-43972","description":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.","status":"published","published":"2023-09-01T20:49:43Z","modified":"2024-09-30T20:19:08Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:01.909154Z"}],"ghsa":[{"id":"GHSA-gr7p-26mx-9pgw","title":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free...","description":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.","status":"published","published":"2023-09-01T21:30:59Z","modified":"2024-04-04T07:22:15Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:56:50.902062Z"}],"nvd":[{"id":"CVE-2023-3297","description":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.","status":"published","published":"2023-09-01T21:15:07.977Z","modified":"2026-06-17T06:13:45.857Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:08:27.181588Z"}],"osv":[{"id":"AZL-43453","title":"CVE-2023-3297 affecting package accountsservice 0.6.55-4","description":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.","status":"published","published":"2023-09-01T21:15:07Z","modified":"2026-04-21T04:31:00.369256Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44259","title":"CVE-2023-3297 affecting package accountsservice for versions less than 23.13.9-1","description":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.","status":"published","published":"2023-09-01T21:15:07Z","modified":"2026-04-21T04:50:35.675718Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"UBUNTU-CVE-2023-3297","description":"In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.","status":"published","published":"2023-06-28T12:00:00Z","modified":"2026-04-22T14:07:05.056126Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"CLSA-2026-1787732137","title":"Fix CVE(s): CVE-2023-3297","description":"   * SECURITY UPDATE: use-after-free in user.c (LP: #2024182)\n     - debian/patches/CVE-2023-3297.patch: return from\n       user_change_language_authorized_cb() and\n       user_change_formats_locale_authorized_cb() after throw_error() has\n       consumed the D-Bus invocation, instead of falling through to\n       accounts_user_complete_set_language()/set_formats_locale() and\n       completing the freed invocation a second time.\n     - CVE-2023-3297","status":"published","published":"2026-08-26T08:15:51Z","modified":"2026-10-26T09:32:03.619218794Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"USN-6190-1","title":"accountsservice vulnerability","description":"Kevin Backhouse discovered that AccountsService incorrectly handled certain\nD-Bus messages. A local attacker could use this issue to cause\nAccountsService to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2023-06-28T12:11:45Z","modified":"2026-04-22T10:37:05.130585Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-6190-2","title":"accountsservice vulnerability","description":"USN-6190-1 fixed a vulnerability in AccountsService. This update provides\nthe corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and\nUbuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Kevin Backhouse discovered that AccountsService incorrectly handled certain\n D-Bus messages. A local attacker could use this issue to cause\n AccountsService to crash, resulting in a denial of service, or possibly\n execute arbitrary code.\n","status":"published","published":"2023-09-25T10:52:46Z","modified":"2026-06-29T13:50:53.109264065Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}