Files
CVEs-PoC/2017/CVE-2017-18367.md
2025-09-29 21:09:30 +02:00

755 B

CVE-2017-18367

Description

libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.

POC

Reference

No PoCs from references.

Github