{"id":"USN-9069-1","summary":"golang-github-seccomp-libseccomp-golang vulnerability","details":"It was discovered that libseccomp-golang incorrectly generated BPF filters\nfor rules that specified multiple syscall arguments, matching any one of\nthe arguments instead of all of them. An attacker could possibly use this\nissue to bypass intended seccomp restrictions.","modified":"2026-11-13T11:28:23.772319857Z","published":"2026-11-12T20:50:15Z","related":["UBUNTU-CVE-2017-18367"],"upstream":["CVE-2017-18367","UBUNTU-CVE-2017-18367"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-9069-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2017-18367"}],"affected":[{"package":{"name":"golang-github-seccomp-libseccomp-golang","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/golang-github-seccomp-libseccomp-golang?arch=source&distro=esm-apps%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-1ubuntu0.1~esm1"}]}],"versions":["0.9.0-1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"golang-github-seccomp-libseccomp-golang-dev","binary_version":"0.9.0-1ubuntu0.1~esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9069-1.json","cves_map":{"ecosystem":"Ubuntu:Pro:18.04:LTS","cves":[{"severity":[{"score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2017-18367"}]}}}],"schema_version":"1.9.2"}