VDB
ALPINE-CVE-2019-9893
ALPINE-CVE-2019-9893
PUBLISHED
CVSS 9.800000190734863 CRITICAL
libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.
Risk Scores
CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.15 | libseccomp | 2.3.3-r1, 2.3.2-r1, 2.3.2-r0 |
| Alpine:v3.10 | libseccomp | 0, 2.3.3-r1, 2.3.2-r1 |
| Alpine:v3.8 | libseccomp | 0, 2.2.1-r0, 2.3.1-r0 |
| Alpine:v3.13 | libseccomp | 2.3.2-r0, 2.3.3-r1, 2.3.2-r1 |
| Alpine:v3.12 | libseccomp | 0, 2.2.1-r0, 2.3.0-r0 |
| Alpine:v3.19 | libseccomp | 2.2.1-r0, 2.3.3-r1, 2.3.2-r1 |
| Alpine:v3.16 | libseccomp | 0, 2.3.3-r1, 2.3.2-r1 |
| Alpine:v3.11 | libseccomp | 2.3.3-r1, 2.2.1-r0, 2.3.0-r0 |
| Alpine:v3.22 | libseccomp | 2.2.1-r0, 2.3.3-r1, 2.3.2-r1 |
| Alpine:v3.9 | libseccomp | 2.3.0-r0, 2.3.3-r1, 2.3.2-r1 |
| Alpine:v3.23 | libseccomp | 2.3.0-r0, 2.3.2-r0, 2.3.1-r0 |
| Alpine:v3.21 | libseccomp | 2.2.1-r0, 2.3.3-r1, 2.3.2-r1 |
| Alpine:v3.14 | libseccomp | 0, 2.2.1-r0, 2.3.0-r0 |
| Alpine:v3.20 | libseccomp | 2.3.3-r1, 2.3.2-r1, 2.3.2-r0 |
| Alpine:v3.18 | libseccomp | 2.3.2-r1, 2.3.3-r1, 2.3.2-r1 |
| Alpine:v3.17 | libseccomp | 0, 2.3.3-r1, 2.3.2-r1 |
Timeline
- Mar 21, 2019 CVE Published
- Dec 3, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch