[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjYi-ETPiXjn2vl7Atge5XeyfEWBl4UH_Soeiu1J55mo":3,"g5a-risk:CVE-2021-3939":157},{"success":4,"data":5,"meta":155},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":26,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":65,"references":66,"referencesCount":81,"weaknesses":82,"weaknessesCount":97,"isActivelyExploited":98,"cisaInfo":26,"otxData":26,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":153,"notableEvents":154},"CVE-2021-3939","What is CVE-2021-3939?","Ubuntu-specific modifications to accountsservice (in patch file debian\u002Fpatches\u002F0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.","Ubuntu-specific modifications to accountsservice (in patch file debian\u002Fpatches\u002F0010-set-language.patch) caused the fallback_locale variable, pointing to stat...","2021-11-17T04:15:06.977","2023-06-12T07:16:02.547",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":37,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":36},"security@ubuntu.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":22,"UserInteraction":23,"Scope":34,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",1.1,6,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":25,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",7.2,3.9,10,0.00347,[46,46,46,46,46,46,46],"High",[50,55,59,62],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"canonical","accountsservice","*","cpe:2.3:a:canonical:accountsservice:*:*:*:*:*:*:*:*",{"vendor":51,"product":56,"version":57,"criteria":58,"vulnerable":4},"ubuntu_linux","20.04","cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",{"vendor":51,"product":56,"version":60,"criteria":61,"vulnerable":4},"21.04","cpe:2.3:o:canonical:ubuntu_linux:21.04:*:*:*:*:*:*:*",{"vendor":51,"product":56,"version":63,"criteria":64,"vulnerable":4},"21.10","cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*",4,[67,71,76],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F172848\u002FUbuntu-accountsservice-Double-Free-Memory-Corruption.html","Packetstormsecurity",[],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fbugs.launchpad.net\u002Fubuntu\u002F+source\u002Faccountsservice\u002F+bug\u002F1950149","Launchpad",[75],"Broken Link",{"url":77,"source":78,"tags":79},"https:\u002F\u002Fubuntu.com\u002Fsecurity\u002Fnotices\u002FUSN-5149-1","Ubuntu",[80],"Vendor Advisory",3,[83,91],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-590","Free of Memory not on the Heap","The product calls free() on a pointer to memory that was not allocated using associated heap allocation functions such as malloc(), calloc(), or realloc().","When free() is called on an invalid pointer, the program's memory management data structures may become corrupted. This corruption can cause the program to crash or, in some circumstances, an attacker may be able to cause free() to operate on controllable memory locations to modify critical program variables or execute code.","Incomplete","Variant","Simple",{"id":92,"name":93,"description":94,"extendedDescription":95,"status":88,"abstraction":96,"structure":90},"CWE-763","Release of Invalid Pointer or Reference","The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.","This weakness can take several forms, such as:","Base",2,false,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2021-3939? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-3939, a high severity cyber security vulnerability from 2021. Ubuntu-specific modifications to accountsservice (in patch f...","CVE-2021-3939, CVE-2021-3939 vulnerability, CVE-2021-3939 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, canonical security, accountsservice vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2021-3939",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-3939","Cybersecurity","CVE-2021-3939, CVE-2021-3939 vulnerability, CVE-2021-3939 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126,143],{"Operator":26,"Negate":26,"Nodes":127},[128],{"Operator":129,"Negate":26,"CPEMatch":130},"OR",[131,135,139],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":133,"VersionEndExcluding":134,"VersionEndIncluding":26},"AB08CB97-D747-4D11-9824-4AD73BAA28F6","0.6.55-0ubuntu12\\~20.04","0.6.55-0ubuntu12\\~20.05",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":137,"VersionEndExcluding":138,"VersionEndIncluding":26},"EDFB086F-2F2C-48ED-B020-96FDA6D581EB","0.6.55-0ubuntu13","0.6.55-0ubuntu13.3",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":141,"VersionEndExcluding":142,"VersionEndIncluding":26},"F1A2D965-5BF5-4B21-899A-1AD29AE1F669","0.6.55-0ubuntu14","0.6.55-0ubuntu14.1",{"Operator":26,"Negate":26,"Nodes":144},[145],{"Operator":129,"Negate":26,"CPEMatch":146},[147,149,151],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"902B8056-9E37-443B-8905-8AA93E2447FB",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":150,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8EF1C1CC-3FAE-4DE3-BC41-E5B14D5721F4",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AAE4D2D0-CEEB-416F-8BC5-A7987DF56190",[],[],{"lastModified":11,"cacheTime":156,"version":40},1793209714979,{"score":158,"band":159,"action":160,"scoredAt":161},46,"Medium","Plan remediation","2026-07-01T10:27:13.834277+00:00"]