CVE-2017-18367
24.04.2019, 21:29
libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libseccomp-golang_project | libseccomp-golang | 𝑥 ≤ 0.9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-github-seccomp-libseccomp-golang |
|
Common Weakness Enumeration
References