CVE-2024-2313

Katalog CVE

CVSS 2.8 · Low EPSS 0,18%

Kerentanan Insecure Temporary File pada bpftrace. Skor CVSS 3.1 2.8 (Low) menurut ubuntu.com.

Deskripsi (NVD)

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

Rincian

Terbit di NVD

10 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

2.8 (Low), sumber ubuntu.com
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-377: Insecure Temporary File

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998 patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313 advisory pihak ketiga