GO-2020-0007

Source
https://pkg.go.dev/vuln/GO-2020-0007
Import Source
https://vuln.go.dev/ID/GO-2020-0007.json
Aliases
Published
2021-04-14T20:04:52Z
Modified
2023-11-08T03:59:16.160893Z
Details

Filters containing rules with multiple syscall arguments are improperly constructed, such that all arguments are required to match rather than any of the arguments (AND is used rather than OR). These filters can be bypassed by only specifying a subset of the arguments due to this behavior.

References

Affected packages

Go / github.com/seccomp/libseccomp-golang

Package

Name
github.com/seccomp/libseccomp-golang

Affected ranges

Type
SEMVER
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.9.1-0.20170424173420-06e7a29f36a3

Ecosystem specific 

{
    "imports": [
        {
            "path": "github.com/seccomp/libseccomp-golang",
            "symbols": [
                "ScmpFilter.AddRule",
                "ScmpFilter.AddRuleConditional",
                "ScmpFilter.AddRuleConditionalExact",
                "ScmpFilter.AddRuleExact",
                "ScmpFilter.addRuleGeneric"
            ]
        }
    ]
}