High severity7.5OSV Advisory· Published Apr 24, 2019· Updated Jun 17, 2026
CVE-2017-18367
CVE-2017-18367
Description
libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/seccomp/libseccomp-golangGo | < 0.9.1 | 0.9.1 |
Affected products
3- Range: v0.9.0
- cpe:2.3:a:libseccomp-golang_project:libseccomp-golang:*:*:*:*:*:*:*:*Range: <=0.9.0
Patches
Vulnerability mechanics
References
10- www.openwall.com/lists/oss-security/2019/04/25/6nvdMailing ListPatchThird Party AdvisoryWEB
- github.com/seccomp/libseccomp-golang/commit/06e7a29f36a34b8cf419aeb87b979ee508e58f9envdPatchThird Party AdvisoryWEB
- github.com/seccomp/libseccomp-golang/issues/22nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-58v3-j75h-xr49ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-18367ghsaADVISORY
- access.redhat.com/errata/RHSA-2019:4087nvdWEB
- access.redhat.com/errata/RHSA-2019:4090nvdWEB
- lists.debian.org/debian-lts-announce/2020/08/msg00016.htmlnvdWEB
- usn.ubuntu.com/4574-1ghsaWEB
- usn.ubuntu.com/4574-1/nvd
News mentions
0No linked articles in our index yet.