CVE Vulnerabilities

CVE-2020-16127

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Nov 11, 2020 | Modified: Nov 24, 2020
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to this location.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Accountsservice Freedesktop * 0.6.55 (excluding)
Accountsservice Ubuntu devel *
Accountsservice Ubuntu focal *
Accountsservice Ubuntu groovy *
Accountsservice Ubuntu trusty *

References