Summary
Jann Horn discovered that libseccomp did not correctly generate 64-bit
syscall argument comparisons with arithmetic operators (LT, GT, LE, GE).
An attacker could use this to bypass intended access restrictions for
argument-filtered system calls.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libseccomp | 2.4.1-0ubuntu0.16.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | libseccomp | 2.4.1-0ubuntu0.18.04.2 |
Vulnerabilities 1
-
Unscored —
libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (…
References
-
report
https://ubuntu.com/security/CVE-2019-9893