CVE-2017-18367 PUBLISHED

libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.

EPSS 0.44% · 62.9th percentile

Risk Scores

EPSS Score
0.44%
62.9th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSgolang-github-seccomp-libseccomp-golang0, 0.9.0-1
Ubuntu:16.04:LTSgolang-github-seccomp-libseccomp-golang0, 0.0~git20150813.0.1b506fc-1

Timeline

References

Open in Interactive Console →