Heap-double-free vulnerability in systemd
Summary
OSV-2022-472: Heap-double-free in nft_set_context_free_many. Affects systemd versions >= ab51fd9dbdc59f9a37acd8acaea3e9088d092bba, < b48ed70c79c6482e1f39b77d16e62043ff5042a5. Fixed in b48ed70c79c6482e1f39b77d16e62043ff5042a5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
systemd is a popular init system and service manager for Linux operating systems. It is responsible for managing the startup and shutdown of the system, as well as the management of system services. This vulnerability affects the nft_set_context_free_many function in systemd, which is used for parsing network filter tables. The vulnerability allows for a heap-double-free, which can lead to a crash or potentially be exploited for arbitrary code execution.
Vulnerability Detail
The vulnerability in systemd is a heap-double-free issue. When parsing network filter tables, the nft_set_context_free_many function can be triggered in a way that causes a double-free of a heap-allocated object. This can lead to a crash or potentially be exploited by an attacker to execute arbitrary code. The vulnerability was discovered through an OSS-Fuzz report and has been assigned a high severity level.
How To Fix
Minimum fixed version
b48ed70c79c6482e1f39b77d16e62043ff5042a5
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is currently no known workaround for this vulnerability. It is recommended to update to the latest version of systemd as soon as possible.
Conclusion
The heap-double-free vulnerability in systemd can lead to a crash or potential code execution. It is crucial to update to the latest version of systemd to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for systemd →
FAQ
systemd is an init system and service manager for Linux operating systems. It is responsible for managing the startup and shutdown of the system, as well as the management of system services.
A heap-double-free vulnerability occurs when a program attempts to free a heap-allocated object more than once. This can lead to memory corruption and potentially be exploited by an attacker.
This vulnerability was discovered through an OSS-Fuzz report. OSS-Fuzz is a continuous fuzzing service for open source software that helps identify and fix vulnerabilities.
This vulnerability has been assigned a high severity level due to its potential for crashing the system or allowing arbitrary code execution.
There is currently no known workaround for this vulnerability. It is recommended to update to the latest version of systemd to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for systemd.
