UBUNTU-CVE-2021-23975

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2021-23975

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-23975.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2021-23975

Upstream

CVE-2021-23975

Downstream

USN-4756-1

Related

USN-4756-1

Published

2021-02-26T02:15:00Z

Modified

2025-09-08T16:46:59Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
Ubuntu - low

Summary

[none]

Details

The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof function, instead of using the API method that checks for invalid pointers. This vulnerability affects Firefox < 86.

References

Affected packages

Ubuntu:16.04:LTS / firefox

Package

Name: firefox
Purl: pkg:deb/ubuntu/firefox@86.0+build3-0ubuntu0.16.04.1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

86.0+build3-0ubuntu0.16.04.1

Affected versions

41.*

41.0.2+build2-0ubuntu1

42.*

42.0+build2-0ubuntu1

44.*

44.0+build3-0ubuntu2

44.0.1+build1-0ubuntu1

44.0.2+build1-0ubuntu1

45.*

45.0+build2-0ubuntu1

45.0.1+build1-0ubuntu1

45.0.2+build1-0ubuntu1

46.*

46.0+build5-0ubuntu0.16.04.2

46.0.1+build1-0ubuntu0.16.04.2

47.*

47.0+build3-0ubuntu0.16.04.1

48.*

48.0+build2-0ubuntu0.16.04.1

49.*

49.0+build4-0ubuntu0.16.04.1

49.0.2+build2-0ubuntu0.16.04.2

50.*

50.0+build2-0ubuntu0.16.04.2

50.0.2+build1-0ubuntu0.16.04.1

50.1.0+build2-0ubuntu0.16.04.1

51.*

51.0.1+build2-0ubuntu0.16.04.1

51.0.1+build2-0ubuntu0.16.04.2

52.*

52.0+build2-0ubuntu0.16.04.1

52.0.1+build2-0ubuntu0.16.04.1

52.0.2+build1-0ubuntu0.16.04.1

53.*

53.0+build6-0ubuntu0.16.04.1

53.0.2+build1-0ubuntu0.16.04.2

53.0.3+build1-0ubuntu0.16.04.2

54.*

54.0+build3-0ubuntu0.16.04.1

55.*

55.0.1+build2-0ubuntu0.16.04.2

55.0.2+build1-0ubuntu0.16.04.1

56.*

56.0+build6-0ubuntu0.16.04.1

56.0+build6-0ubuntu0.16.04.2

57.*

57.0+build4-0ubuntu0.16.04.5

57.0+build4-0ubuntu0.16.04.6

57.0.1+build2-0ubuntu0.16.04.1

57.0.3+build1-0ubuntu0.16.04.1

57.0.4+build1-0ubuntu0.16.04.1

58.*

58.0+build6-0ubuntu0.16.04.1

58.0.1+build1-0ubuntu0.16.04.1

58.0.2+build1-0ubuntu0.16.04.1

59.*

59.0+build5-0ubuntu0.16.04.1

59.0.1+build1-0ubuntu0.16.04.1

59.0.2+build1-0ubuntu0.16.04.1

59.0.2+build1-0ubuntu0.16.04.3

60.*

60.0+build2-0ubuntu0.16.04.1

60.0.1+build2-0ubuntu0.16.04.1

60.0.2+build1-0ubuntu0.16.04.1

61.*

61.0+build3-0ubuntu0.16.04.2

61.0.1+build1-0ubuntu0.16.04.1

62.*

62.0+build2-0ubuntu0.16.04.3

62.0+build2-0ubuntu0.16.04.4

62.0+build2-0ubuntu0.16.04.5

62.0.3+build1-0ubuntu0.16.04.2

63.*

63.0+build2-0ubuntu0.16.04.2

63.0.3+build1-0ubuntu0.16.04.1

64.*

64.0+build3-0ubuntu0.16.04.1

65.*

65.0+build2-0ubuntu0.16.04.1

65.0.1+build2-0ubuntu0.16.04.1

66.*

66.0+build3-0ubuntu0.16.04.2

66.0.1+build1-0ubuntu0.16.04.1

66.0.2+build1-0ubuntu0.16.04.1

66.0.3+build1-0ubuntu0.16.04.1

66.0.4+build3-0ubuntu0.16.04.1

66.0.5+build1-0ubuntu0.16.04.1

67.*

67.0+build2-0ubuntu0.16.04.1

67.0.1+build1-0ubuntu0.16.04.1

67.0.2+build2-0ubuntu0.16.04.1

67.0.3+build1-0ubuntu0.16.04.1

67.0.4+build1-0ubuntu0.16.04.1

68.*

68.0+build3-0ubuntu0.16.04.1

68.0.1+build1-0ubuntu0.16.04.1

68.0.2+build1-0ubuntu0.16.04.1

69.*

69.0+build2-0ubuntu0.16.04.4

69.0.1+build1-0ubuntu0.16.04.1

69.0.2+build1-0ubuntu0.16.04.1

70.*

70.0+build2-0ubuntu0.16.04.1

70.0.1+build1-0ubuntu0.16.04.1

71.*

71.0+build5-0ubuntu0.16.04.1

72.*

72.0.1+build1-0ubuntu0.16.04.1

72.0.2+build1-0ubuntu0.16.04.1

73.*

73.0.1+build1-0ubuntu0.16.04.1

74.*

74.0+build3-0ubuntu0.16.04.1

74.0.1+build1-0ubuntu0.16.04.1

75.*

75.0+build3-0ubuntu0.16.04.1

76.*

76.0+build2-0ubuntu0.16.04.1

76.0.1+build1-0ubuntu0.16.04.1

77.*

77.0.1+build1-0ubuntu0.16.04.1

78.*

78.0.1+build1-0ubuntu0.16.04.1

78.0.2+build2-0ubuntu0.16.04.1

79.*

79.0+build1-0ubuntu0.16.04.2

80.*

80.0+build2-0ubuntu0.16.04.1

80.0.1+build1-0ubuntu0.16.04.1

81.*

81.0+build2-0ubuntu0.16.04.1

81.0.2+build1-0ubuntu0.16.04.1

82.*

82.0+build2-0ubuntu0.16.04.5

82.0.2+build1-0ubuntu0.16.04.1

82.0.3+build1-0ubuntu0.16.04.1

83.*

83.0+build2-0ubuntu0.16.04.3

84.*

84.0+build3-0ubuntu0.16.04.1

84.0.1+build1-0ubuntu0.16.04.1

84.0.2+build1-0ubuntu0.16.04.1

85.*

85.0+build1-0ubuntu0.16.04.1

85.0.1+build1-0ubuntu0.16.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "firefox",
            "binary_version": "86.0+build3-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "firefox-dev",
            "binary_version": "86.0+build3-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "firefox-geckodriver",
            "binary_version": "86.0+build3-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "86.0+build3-0ubuntu0.16.04.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:18.04:LTS / firefox

Package

Name: firefox
Purl: pkg:deb/ubuntu/firefox@86.0+build3-0ubuntu0.18.04.1?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

86.0+build3-0ubuntu0.18.04.1

Affected versions

56.*

56.0+build6-0ubuntu1

57.*

57.0.1+build2-0ubuntu1

59.*

59.0.1+build1-0ubuntu1

59.0.2+build1-0ubuntu1

60.*

60.0+build2-0ubuntu1

60.0.1+build2-0ubuntu0.18.04.1

60.0.2+build1-0ubuntu0.18.04.1

61.*

61.0+build3-0ubuntu0.18.04.1

61.0.1+build1-0ubuntu0.18.04.1

62.*

62.0+build2-0ubuntu0.18.04.3

62.0+build2-0ubuntu0.18.04.4

62.0+build2-0ubuntu0.18.04.5

62.0.3+build1-0ubuntu0.18.04.1

63.*

63.0+build2-0ubuntu0.18.04.2

63.0.3+build1-0ubuntu0.18.04.1

64.*

64.0+build3-0ubuntu0.18.04.1

65.*

65.0+build2-0ubuntu0.18.04.1

65.0.1+build2-0ubuntu0.18.04.1

66.*

66.0+build3-0ubuntu0.18.04.1

66.0.1+build1-0ubuntu0.18.04.1

66.0.2+build1-0ubuntu0.18.04.1

66.0.3+build1-0ubuntu0.18.04.1

66.0.4+build3-0ubuntu0.18.04.1

66.0.5+build1-0ubuntu0.18.04.1

67.*

67.0+build2-0ubuntu0.18.04.1

67.0.1+build1-0ubuntu0.18.04.1

67.0.2+build2-0ubuntu0.18.04.1

67.0.3+build1-0ubuntu0.18.04.1

67.0.4+build1-0ubuntu0.18.04.1

68.*

68.0+build3-0ubuntu0.18.04.1

68.0.1+build1-0ubuntu0.18.04.1

68.0.2+build1-0ubuntu0.18.04.1

69.*

69.0+build2-0ubuntu0.18.04.1

69.0.1+build1-0ubuntu0.18.04.1

69.0.2+build1-0ubuntu0.18.04.1

70.*

70.0+build2-0ubuntu0.18.04.1

70.0.1+build1-0ubuntu0.18.04.1

71.*

71.0+build5-0ubuntu0.18.04.1

72.*

72.0.1+build1-0ubuntu0.18.04.1

72.0.2+build1-0ubuntu0.18.04.1

73.*

73.0+build3-0ubuntu0.18.04.1

73.0.1+build1-0ubuntu0.18.04.1

74.*

74.0+build3-0ubuntu0.18.04.1

74.0.1+build1-0ubuntu0.18.04.1

75.*

75.0+build3-0ubuntu0.18.04.1

76.*

76.0+build2-0ubuntu0.18.04.1

76.0.1+build1-0ubuntu0.18.04.1

77.*

77.0.1+build1-0ubuntu0.18.04.1

78.*

78.0.1+build1-0ubuntu0.18.04.1

78.0.2+build2-0ubuntu0.18.04.1

79.*

79.0+build1-0ubuntu0.18.04.1

80.*

80.0+build2-0ubuntu0.18.04.1

80.0.1+build1-0ubuntu0.18.04.1

81.*

81.0+build2-0ubuntu0.18.04.1

81.0.2+build1-0ubuntu0.18.04.1

82.*

82.0+build2-0ubuntu0.18.04.1

82.0.2+build1-0ubuntu0.18.04.1

82.0.3+build1-0ubuntu0.18.04.1

83.*

83.0+build2-0ubuntu0.18.04.2

84.*

84.0+build3-0ubuntu0.18.04.1

84.0.1+build1-0ubuntu0.18.04.1

84.0.2+build1-0ubuntu0.18.04.1

85.*

85.0+build1-0ubuntu0.18.04.1

85.0.1+build1-0ubuntu0.18.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "firefox",
            "binary_version": "86.0+build3-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "firefox-dev",
            "binary_version": "86.0+build3-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "firefox-geckodriver",
            "binary_version": "86.0+build3-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "86.0+build3-0ubuntu0.18.04.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:Pro:18.04:LTS / mozjs52

Package

Name: mozjs52
Purl: pkg:deb/ubuntu/mozjs52@52.9.1-0ubuntu0.18.04.1?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

52.*

52.3.1-0ubuntu3

52.3.1-7fakesync1

52.8.1-0ubuntu0.18.04.1

52.9.1-0ubuntu0.18.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libmozjs-52-0",
            "binary_version": "52.9.1-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libmozjs-52-dev",
            "binary_version": "52.9.1-0ubuntu0.18.04.1"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / mozjs38

Package

Name: mozjs38
Purl: pkg:deb/ubuntu/mozjs38@38.8.0~repack1-0ubuntu4?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

38.*

38.8.0~repack1-0ubuntu1

38.8.0~repack1-0ubuntu3

38.8.0~repack1-0ubuntu4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libmozjs-38-0",
            "binary_version": "38.8.0~repack1-0ubuntu4"
        },
        {
            "binary_name": "libmozjs-38-dev",
            "binary_version": "38.8.0~repack1-0ubuntu4"
        }
    ]
}

Ubuntu:20.04:LTS / firefox

Package

Name: firefox
Purl: pkg:deb/ubuntu/firefox@86.0+build3-0ubuntu0.20.04.1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

86.0+build3-0ubuntu0.20.04.1

Affected versions

69.*

69.0.3+build1-0ubuntu1

70.*

70.0+build2-0ubuntu1

70.0+build2-0ubuntu2

70.0.1+build1-0ubuntu2

71.*

71.0+build2-0ubuntu2

71.0+build5-0ubuntu1

72.*

72.0.1+build1-0ubuntu1

72.0.2+build1-0ubuntu1

73.*

73.0+build1-0ubuntu1

73.0+build2-0ubuntu1

73.0+build3-0ubuntu1

73.0.1+build1-0ubuntu1

74.*

74.0+build1-0ubuntu1

74.0+build2-0ubuntu1

74.0+build2-0ubuntu2

74.0+build3-0ubuntu1

75.*

75.0+build3-0ubuntu1

76.*

76.0+build2-0ubuntu0.20.04.1

76.0.1+build1-0ubuntu0.20.04.1

77.*

77.0.1+build1-0ubuntu0.20.04.1

78.*

78.0.1+build1-0ubuntu0.20.04.1

78.0.2+build2-0ubuntu0.20.04.1

79.*

79.0+build1-0ubuntu0.20.04.1

80.*

80.0+build2-0ubuntu0.20.04.1

80.0.1+build1-0ubuntu0.20.04.1

81.*

81.0+build2-0ubuntu0.20.04.1

81.0.2+build1-0ubuntu0.20.04.1

82.*

82.0+build2-0ubuntu0.20.04.1

82.0.2+build1-0ubuntu0.20.04.1

82.0.3+build1-0ubuntu0.20.04.1

83.*

83.0+build2-0ubuntu0.20.04.1

84.*

84.0+build3-0ubuntu0.20.04.1

84.0.1+build1-0ubuntu0.20.04.1

84.0.2+build1-0ubuntu0.20.04.1

85.*

85.0+build1-0ubuntu0.20.04.1

85.0.1+build1-0ubuntu0.20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "firefox",
            "binary_version": "86.0+build3-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "firefox-dev",
            "binary_version": "86.0+build3-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "firefox-geckodriver",
            "binary_version": "86.0+build3-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "86.0+build3-0ubuntu0.20.04.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:Pro:20.04:LTS / mozjs68

Package

Name: mozjs68
Purl: pkg:deb/ubuntu/mozjs68@68.6.0-1ubuntu1?arch=source&distro=esm-infra/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

68.*

68.5.0-1~fakesync

68.5.0-2~fakesync

68.6.0-1

68.6.0-1ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libmozjs-68-0",
            "binary_version": "68.6.0-1ubuntu1"
        },
        {
            "binary_name": "libmozjs-68-dev",
            "binary_version": "68.6.0-1ubuntu1"
        }
    ]
}

Ubuntu:Pro:20.04:LTS / mozjs52

Package

Name: mozjs52
Purl: pkg:deb/ubuntu/mozjs52@52.9.1-1ubuntu3?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

52.*

52.9.1-1build1

52.9.1-1ubuntu3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libmozjs-52-0",
            "binary_version": "52.9.1-1ubuntu3"
        },
        {
            "binary_name": "libmozjs-52-dev",
            "binary_version": "52.9.1-1ubuntu3"
        }
    ]
}

Ubuntu:22.04:LTS / mozjs78

Package

Name: mozjs78
Purl: pkg:deb/ubuntu/mozjs78@78.15.0-4ubuntu1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

78.*

78.13.0-1

78.15.0-2

78.15.0-4ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libmozjs-78-0",
            "binary_version": "78.15.0-4ubuntu1"
        },
        {
            "binary_name": "libmozjs-78-dev",
            "binary_version": "78.15.0-4ubuntu1"
        }
    ]
}