This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-9893 →

DEBIAN-CVE-2019-9893

libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might ab...

Original description

The description as published by the source.

libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libseccomp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-1"}]}]

Debian:13 libseccomp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-1"}]}]

Debian:14 libseccomp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-1"}]}]

References

advisory security-tracker.debian.org