CVE-2017-18367

libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them

published April 24, 2019

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02430 · 84.0th percentile
Published
2019-04-24T20:02Z
EPSS history
Timeline
  • 24 APR 20:02Z
    libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them
    cvelistv5