GHSA-VJGJ-42F6-7997中危已审查

netfoil's optional seccomp sandboxing was not applied

OSV 1.4.0 · github-reviewed · 修改于 2026-04-30 06:23

发布时间

2026-04-30 06:23

GitHub 审查时间

2026-04-30 06:23

NVD 发布时间

—

源文件

advisories/github-reviewed/2026/04/GHSA-vjgj-42f6-7997/GHSA-vjgj-42f6-7997.json

公告说明

Summary

The optional flag --filter-system-calls was not applied even if specified.

Details

This is a defense in depth feature to apply additional seccomp filters after the binary has started. The example config also sandboxes the binary with systemd.

Impact

Reduced sandboxing of the netfoil binary.

受影响的软件包

github.com/tinfoil-factory/netfoil

ECOSYSTEM

引入00.2.1

标识信息

别名 / CVE

无

CWE

CWE-791

软件生态

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V4

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

原始 OSV JSON

{
  "id": "GHSA-vjgj-42f6-7997",
  "aliases": [],
  "details": "### Summary\nThe optional flag `--filter-system-calls` was not applied even if specified.\n\n### Details\nThis is a defense in depth feature to apply additional seccomp filters after the binary has started. The example config also sandboxes the binary with systemd.\n\n### Impact\nReduced sandboxing of the netfoil binary.",
  "summary": "netfoil's optional seccomp sandboxing was not applied",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.2.1"
            }
          ]
        }
      ],
      "package": {
        "name": "github.com/tinfoil-factory/netfoil",
        "ecosystem": "Go"
      }
    }
  ],
  "modified": "2026-04-29T22:23:41Z",
  "severity": [
    {
      "type": "CVSS_V4",
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
    }
  ],
  "published": "2026-04-29T22:23:41Z",
  "references": [
    {
      "url": "https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-vjgj-42f6-7997",
      "type": "WEB"
    },
    {
      "url": "https://github.com/tinfoil-factory/netfoil/commit/8c84f1b03adf1df5b4e6d07a49043d13dbbf9ee1",
      "type": "WEB"
    },
    {
      "url": "https://github.com/tinfoil-factory/netfoil",
      "type": "PACKAGE"
    },
    {
      "url": "https://github.com/tinfoil-factory/netfoil/releases/tag/v0.2.1",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-791"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "nvd_published_at": null,
    "github_reviewed_at": "2026-04-29T22:23:41Z"
  }
}