id: GO-2024-3199
modules:
    - module: github.com/landlock-lsm/go-landlock
      versions:
        - fixed: 0.0.0-20241013234402-fb3ad845df46
      non_go_versions:
        - introduced: 0.0.0-20240109
summary: |-
    Go-Landlock in best-effort mode did not restrict TCP bind and connect operations
    correctly in github.com/landlock-lsm/go-landlock
ghsas:
    - GHSA-vv6c-69r6-chg9
references:
    - advisory: https://github.com/landlock-lsm/go-landlock/security/advisories/GHSA-vv6c-69r6-chg9
    - fix: https://github.com/landlock-lsm/go-landlock/commit/fb3ad845df462d013f9c8a965c496617c6a5778b
notes:
    - fix: 'github.com/landlock-lsm/go-landlock: could not add vulnerable_at: cannot auto-guess when fixed version is 0.0.0 pseudo-version'
source:
    id: GHSA-vv6c-69r6-chg9
    created: 2024-10-15T10:53:40.707635-04:00
review_status: UNREVIEWED