Lack of data validation - Path Traversal In accountsservice
Description
Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 0.6.45-2 | ||
debian 11 | 0.6.45-2 | ||
debian 13 | 0.6.45-2 | ||
 rpm rhel7 | 0:20180531-1.el7 | ||
rpm rhel7 | 0:0.10.8-1.el7 | ||
rpm rhel7 | 0:1.15.12-3.el7 | ||
debian 14 | 0.6.45-2 | ||
rpm rhel7 | 0:0.3.4-1.el7 | ||
rpm rhel7 | 1:3.8.6-1.el7 | ||
rpm rhel7 | 0:4.0.1-8.el7 |
1-10 of 150
10
Aliases
1. 2. 3. 4. 5.