An issue exists AccountService 0.6.37 in the userchangepasswordauthorizedcb() function in user.c which could let a local users obtain encrypted passwords.
{
"binaries": [
{
"binary_version": "0.6.35-0ubuntu7.3+esm3",
"binary_name": "accountsservice"
},
{
"binary_version": "0.6.35-0ubuntu7.3+esm3",
"binary_name": "gir1.2-accountsservice-1.0"
},
{
"binary_version": "0.6.35-0ubuntu7.3+esm3",
"binary_name": "libaccountsservice-dev"
},
{
"binary_version": "0.6.35-0ubuntu7.3+esm3",
"binary_name": "libaccountsservice0"
},
{
"binary_version": "0.6.35-0ubuntu7.3+esm3",
"binary_name": "libpam-pin"
}
]
}
{
"binaries": [
{
"binary_version": "0.6.40-2ubuntu11.6+esm1",
"binary_name": "accountsservice"
},
{
"binary_version": "0.6.40-2ubuntu11.6+esm1",
"binary_name": "gir1.2-accountsservice-1.0"
},
{
"binary_version": "0.6.40-2ubuntu11.6+esm1",
"binary_name": "libaccountsservice-dev"
},
{
"binary_version": "0.6.40-2ubuntu11.6+esm1",
"binary_name": "libaccountsservice0"
}
]
}
{
"binaries": [
{
"binary_version": "0.6.45-1ubuntu1.3+esm1",
"binary_name": "accountsservice"
},
{
"binary_version": "0.6.45-1ubuntu1.3+esm1",
"binary_name": "gir1.2-accountsservice-1.0"
},
{
"binary_version": "0.6.45-1ubuntu1.3+esm1",
"binary_name": "libaccountsservice-dev"
},
{
"binary_version": "0.6.45-1ubuntu1.3+esm1",
"binary_name": "libaccountsservice0"
}
]
}
{
"binaries": [
{
"binary_version": "0.6.55-0ubuntu12~20.04.7",
"binary_name": "accountsservice"
},
{
"binary_version": "0.6.55-0ubuntu12~20.04.7",
"binary_name": "gir1.2-accountsservice-1.0"
},
{
"binary_version": "0.6.55-0ubuntu12~20.04.7",
"binary_name": "libaccountsservice-dev"
},
{
"binary_version": "0.6.55-0ubuntu12~20.04.7",
"binary_name": "libaccountsservice0"
}
],
"availability": "No subscription required"
}
{
"binaries": [
{
"binary_version": "22.07.5-2ubuntu1.5",
"binary_name": "accountsservice"
},
{
"binary_version": "22.07.5-2ubuntu1.5",
"binary_name": "gir1.2-accountsservice-1.0"
},
{
"binary_version": "22.07.5-2ubuntu1.5",
"binary_name": "libaccountsservice-dev"
},
{
"binary_version": "22.07.5-2ubuntu1.5",
"binary_name": "libaccountsservice0"
}
],
"availability": "No subscription required"
}