The issue is related to insufficient access control in the AccountsService of the Ubuntu operating system. It may allow an attacker to cause a denial of service. The problem is that accountsservice no longer drops permissions when writing .pam environment.