9.8
CVE-2019-9893
- EPSS 0.79%
- Veröffentlicht 21.03.2019 16:01:17
- Zuletzt bearbeitet 21.11.2024 04:52:31
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginlibseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libseccomp Project ≫ Libseccomp Version < 2.4.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.79% | 0.735 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|