https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T06:56:37.826372+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-14036 CVE-2018-14036 2026-10-03T06:56:37.830583+00:00

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

 https://vulnerability.circl.lu/vuln/usn-4616-1 USN-4616-1 — accountsservice vulnerabilities 2026-10-03T06:56:37.830690+00:00

Affected: Ubuntu:16.04:LTS: accountsservice, Ubuntu:18.04:LTS: accountsservice, Ubuntu:20.04:LTS: accountsservice

Kevin Backhouse discovered that AccountsService incorrectly dropped privileges. A local user could possibly use this issue to cause AccountsService to crash or hang, resulting in a denial of service. (CVE-2020-16126)

Kevin Backhouse discovered that AccountsService incorrectly handled reading .pam_environment files. A local user could possibly use this issue to cause AccountsService to crash or hang, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2020-16127)

Matthias Gerstner discovered that AccountsService incorrectly handled certain path checks. A local attacker could possibly use this issue to read arbitrary files. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-14036)