An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to this location.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.6.55-0ubuntu12~20.04.4", "binary_name": "accountsservice" }, { "binary_version": "0.6.55-0ubuntu12~20.04.4", "binary_name": "accountsservice-dbgsym" }, { "binary_version": "0.6.55-0ubuntu12~20.04.4", "binary_name": "gir1.2-accountsservice-1.0" }, { "binary_version": "0.6.55-0ubuntu12~20.04.4", "binary_name": "libaccountsservice-dev" }, { "binary_version": "0.6.55-0ubuntu12~20.04.4", "binary_name": "libaccountsservice-doc" }, { "binary_version": "0.6.55-0ubuntu12~20.04.4", "binary_name": "libaccountsservice0" }, { "binary_version": "0.6.55-0ubuntu12~20.04.4", "binary_name": "libaccountsservice0-dbgsym" } ] }