seccomp-tools

Seccomp Tools seccomp 解析のための強力なツール群です。 このプロジェクトは主に（ただし排他的ではなく）CTF pwn チャレンジにおける seccomp サンドボックスの解析を目的としています。 一部の機能は CTF 特有のものですが、実世界の seccomp フィルタの解析にも同様に役立ちます。 機能 Dump - 実行ファイルから seccomp BPF を自動的にダンプします。 Disasm - seccomp BPF を人間が読みやすい形式に変換します。 簡易的な逆コンパイルに対応。 可能な限りシステムコール名と引数を表示。 カラフル！ Asm -...

firejail

Firejail Firejail 是一款轻量级安全工具，旨在通过设置受限环境来运行（可能不受信任的）应用程序，从而保护 Linux 系统。 具体来说，它是一个 SUID 沙箱程序，通过使用 Linux 命名空间（namespaces）、seccomp-bpf 和 Linux capabilities 来降低发生安全破坏的风险。它允许一个进程及其所有子进程拥有对全局共享内核资源（如网络栈、进程表和挂载表）的私有视图。Firejail 可以在 SELinux 或 AppArmor 环境中运行，并且已与 Linux 控制组（Control Groups）集成。 该软件使用 C...

Z-Jail

Z-Jail Sandbox multistrato per l'esecuzione di codice nativo su Linux. Sette livelli di difesa indipendenti — nessuna dipendenza esterna, binario PIE di circa 73 KiB. root@kitploit: ┌──────────────────────────────────────────────────────┐ │ Z-Jail │...

oci-seccomp-bpf-hook security update

An update is available for oci-seccomp-bpf-hook. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OCI Hook to generate seccomp json files based on EBF syscalls us...

RockyLinux 9 : oci-seccomp-bpf-hook (RLSA-2026:36617)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:36617 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 Tenable has extracted the preceding description block direct...

AlmaLinux 9 : oci-seccomp-bpf-hook (ALSA-2026:36617)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:36617 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 Tenable has extracted the preceding description block directl...

oci-seccomp-bpf-hook security update

1.2.11-2 - rebuild for CVE-2026-33811 Resolves: RHEL-187325...

RHSA-2026:15940 Red Hat Security Advisory: oci-seccomp-bpf-hook security update

Bulletin has no description...

RHSA-2026:11804 Red Hat Security Advisory: oci-seccomp-bpf-hook security update

Bulletin has no description...

RHEL 9 : oci-seccomp-bpf-hook (RHSA-2026:11804)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:11804 advisory. OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to...

Fedora: Security Advisory (FEDORA-2025-39dd3e6f91)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2017-14530

Malware in sbrugna...

RockyLinux 9 : oci-seccomp-bpf-hook (RLSA-2024:9277)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9277 advisory. golang: net: malformed DNS message can cause infinite loop CVE-2024-24788 Tenable has extracted the preceding description block directly from the RockyLinux...

oci-seccomp-bpf-hook security update

An update is available for oci-seccomp-bpf-hook. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OCI Hook to generate seccomp json files based on EBF syscalls us...

container-tools:ol8 security update

aardvark-dns buildah 2:1.33.11-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/fe85f0d - Resolves: RHEL-61853 2:1.33.10-1 - update to the latest content of...

Oracle Linux 9 : oci-seccomp-bpf-hook (ELSA-2024-9277)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-9277 advisory. 1.2.10-2 - rebuild - Resolves: RHEL-35939 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

oci-seccomp-bpf-hook security update

1.2.10-2 - rebuild - Resolves: RHEL-35939...

RHSA-2024:9277 Red Hat Security Advisory: oci-seccomp-bpf-hook security update

Bulletin has no description...

RHEL 9 : oci-seccomp-bpf-hook (RHSA-2024:9277)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9277 advisory. OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to u...

Oracle Linux 8 : container-tools:ol8 (ELSA-2024-8038)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8038 advisory. aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah cockpit-podman conmon containernetworking-plugins...