PT-2026-39434 · Go · Github.Com/Tinfoil-Factory/Netfoil

Publicado 2026-04-29 · Atualizado 2026-04-29

OSV

CVSS v4.0

6.9

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Summary

The optional flag --filter-system-calls was not applied even if specified.

Details

This is a defense in depth feature to apply additional seccomp filters after the binary has started. The example config also sandboxes the binary with systemd.

Impact

Reduced sandboxing of the netfoil binary.

Correção

Enumeração de Fraquezas

CWE-791

Identificadores relacionados

GHSA-VJGJ-42F6-7997

Produtos afetados

Github.Com/Tinfoil-Factory/Netfoil

Referências · 5

• https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-vjgj-42f6-7997 · Nota
• https://github.com/tinfoil-factory/netfoil · Nota
• https://github.com/tinfoil-factory/netfoil/commit/8c84f1b03adf1df5b4e6d07a49043d13dbbf9ee1 · Nota
• https://github.com/tinfoil-factory/netfoil/releases/tag/v0.2.1 · Nota
• https://osv.dev/vulnerability/GHSA-vjgj-42f6-7997 · Aviso do Fabricante