Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-2313

Опубликовано: 10 мар. 2024
Источник: nvd
CVSS3: 2.8
EPSS Низкий

Описание

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:bpftrace:bpftrace:*:*:*:*:*:*:*:*
Версия до 0.20.2 (исключая)
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 4%
0.00018
Низкий

2.8 Low

CVSS3

Дефекты

CWE-377

Связанные уязвимости

CVSS3: 2.8
ubuntu
почти 2 года назад

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

CVSS3: 2.8
redhat
почти 2 года назад

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

CVSS3: 2.8
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 2.8
debian
почти 2 года назад

If kernel headers need to be extracted, bpftrace will attempt to load ...

rocky
11 месяцев назад

Low: bpftrace security update

EPSS

Процентиль: 4%
0.00018
Низкий

2.8 Low

CVSS3

Дефекты

CWE-377