Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ph92-w482-m4jj

Опубликовано: 11 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 2.8

Описание

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

EPSS

Процентиль: 3%
0.00018
Низкий

2.8 Low

CVSS3

Дефекты

CWE-377

Связанные уязвимости

CVSS3: 2.8
ubuntu
больше 1 года назад

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

CVSS3: 2.8
redhat
больше 1 года назад

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

CVSS3: 2.8
nvd
больше 1 года назад

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

CVSS3: 2.8
msrc
12 месяцев назад

Описание отсутствует

CVSS3: 2.8
debian
больше 1 года назад

If kernel headers need to be extracted, bpftrace will attempt to load ...

EPSS

Процентиль: 3%
0.00018
Низкий

2.8 Low

CVSS3

Дефекты

CWE-377