libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libseccomp | Feb 11, 2020 | Mar 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libseccompUpgrade libseccomp-develUpgrade libseccomp-staticUpgrade libseccomp-debuginfo | Apr 27, 2020 | Mar 21, 2019 |
| Centos_linux | — | Upgrade libseccompUpgrade libseccomp-devel-debuginfoUpgrade libseccomp-debuginfoUpgrade libseccomp-debugsource | Nov 6, 2019 | Mar 21, 2019 |
| Debian | — | Upgrade libseccomp | Jul 30, 2024 | Mar 21, 2019 |
| Gentoo Linux | — | Upgrade sys-libs/libseccomp. | Apr 18, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libseccomp | Sep 12, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libseccomp | Sep 25, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libseccomp | Aug 16, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libcomps-develUpgrade python3-libcompsUpgrade libcompsUpgrade python2-libcomps | Mar 24, 2020 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade libseccompUpgrade libseccomp-devel | Oct 5, 2022 | Mar 14, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade libseccomp-devel-debuginfoUpgrade libseccomp-debugsourceNo solution existsUpgrade libseccomp-debuginfoUpgrade libseccomp-develUpgrade libseccomp | Nov 6, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade libseccomp-develUpgrade libseccomp2-32bitUpgrade libseccomp-toolsUpgrade libseccomp2 | Oct 8, 2019 | Mar 21, 2019 |
| Ubuntu | — | Upgrade libseccomp2 | May 31, 2019 | Mar 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub