mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-02 04:25:08 +02:00
755 B
755 B
CVE-2017-18367
Description
libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.
POC
Reference
No PoCs from references.