ZeroHour

CVE-2019-9893

CVSS 3.0
9.8 critical
EPSS
3%p87
Published
()
Modified
Description

libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.

Vendors
libseccomp project
Products
libseccomp
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.