Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-2313

Опубликовано: 10 мар. 2024
Источник: nvd
CVSS3: 2.8
EPSS Низкий

Описание

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:bpftrace:bpftrace:*:*:*:*:*:*:*:*
Версия до 0.20.2 (исключая)
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 8%
0.00184
Низкий

2.8 Low

CVSS3

Дефекты

CWE-377

Связанные уязвимости

CVSS3: 2.8
ubuntu
больше 2 лет назад

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

CVSS3: 2.8
redhat
больше 2 лет назад

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

CVSS3: 2.8
msrc
около 2 лет назад

If kernel headers need to be extracted bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

CVSS3: 2.8
debian
больше 2 лет назад

If kernel headers need to be extracted, bpftrace will attempt to load ...

rocky
больше 1 года назад

Low: bpftrace security update

EPSS

Процентиль: 8%
0.00184
Низкий

2.8 Low

CVSS3

Дефекты

CWE-377