« Volver al listado

CVE-2020-16127

Estado: ModificadaMedia (5.5)—

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to this location.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Freedesktop — Accountsservice

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-16127",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@ubuntu.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 2.8,
          "attackVector": "LOCAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.3
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@ubuntu.com",
      "affectedData": [
        {
          "vendor": "Freedesktop",
          "product": "accountsservice",
          "versions": [
            {
              "status": "affected",
              "version": "0.6.35-0ubuntu7.3",
              "lessThan": "0.6.35-0ubuntu7.3+esm2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0.6.40-2ubuntu11",
              "lessThan": "0.6.40-2ubuntu11.6",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0.6.45-1ubuntu1",
              "lessThan": "0.6.45-1ubuntu1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0.6.55-0ubuntu",
              "lessThan": "0.6.55-0ubuntu12~20.04.4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0.6.55-0ubuntu13",
              "lessThan": "0.6.55-0ubuntu13.2",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-11-11T04:15:12.177",
  "references": [
    {
      "url": "https://securitylab.github.com/advisories/GHSL-2020-187-accountsservice-drop-privs-DOS",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "security@ubuntu.com"
    },
    {
      "url": "https://securitylab.github.com/advisories/GHSL-2020-187-accountsservice-drop-privs-DOS",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@ubuntu.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-835"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to this location."
    },
    {
      "lang": "es",
      "value": "Una modificación específica de Ubuntu para AccountsService en versiones anteriores a 0.6.55-0ubuntu13.2, entre otras versiones anteriores, llevaría a cabo operaciones de lectura ilimitadas en archivos ~/.pam_environment controlados por el usuario, permitiendo un bucle infinito si /dev/zero está enlazado simbólicamente a esta ubicación"
    }
  ],
  "lastModified": "2026-06-17T02:57:45.447",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:freedesktop:accountsservice:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A297546-6EAD-40F9-819E-E3604CF93964",
              "versionEndExcluding": "0.6.55"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@ubuntu.com"
}