CVE-2020-16127: Freedesktop Accountsservice

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to this location.

Affected products

• Freedesktop Accountsservice: before 0.6.55 (fixed in 0.6.55)

Published 2020-11-11. Last modified 2026-06-17.