Vulnerabilities > CVE-2021-3939 - Release of Invalid Pointer or Reference vulnerability in Canonical Accountsservice and Ubuntu Linux
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 | |
| OS | 3 |
Common Weakness Enumeration (CWE)
References
- http://packetstormsecurity.com/files/172848/Ubuntu-accountsservice-Double-Free-Memory-Corruption.html
- http://packetstormsecurity.com/files/172848/Ubuntu-accountsservice-Double-Free-Memory-Corruption.html
- https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/1950149
- https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/1950149
- https://ubuntu.com/security/notices/USN-5149-1
- https://ubuntu.com/security/notices/USN-5149-1