Skip to content

Potential double free in function scap_open

Low
LucaGuerra published GHSA-c957-pmc3-99qj Feb 20, 2023

Package

falcosecurity/libs

Affected versions

< 0.10.4

Patched versions

0.10.4

Description

Impact

In libscap scap.c file, from the scap_open function, when calling scap_open_udig_int, a double free may occur because the function that calls scap_close(handle) will free the handle, and on the next line, the handle is freed again with free(handle). Removing the affected line solves the issue.

free(handle);

Patches

Upgrade to libs 0.10.4

Workarounds

No

References

Falco Security Audit report, 23-01-1097-LIV by Victor Houal, Laurent Laubin and Mahé Tardy

Severity

Low

CVE ID

No known CVE

Weaknesses

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations. Learn more on MITRE.