CVE-2021-3939 Free of static data in accountsservice

2021-11-1703:15:10

CWE-590

canonical

www.cve.org

ubuntu

accountsservice

vulnerability

fix

cve-2021-3939

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

12.6%

JSON

Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.

CNA Affected

[
  {
    "vendor": "Ubuntu",
    "product": "accountsservice",
    "versions": [
      {
        "version": "0.6.55-0ubuntu12~20.04",
        "status": "affected",
        "lessThan": "0.6.55-0ubuntu12~20.04.5",
        "versionType": "custom"
      },
      {
        "version": "0.6.55-0ubuntu13",
        "status": "affected",
        "lessThan": "0.6.55-0ubuntu13.3",
        "versionType": "custom"
      },
      {
        "version": "0.6.55-0ubuntu14",
        "status": "affected",
        "lessThan": "0.6.55-0ubuntu14.1",
        "versionType": "custom"
      }
    ]
  }
]