CVE-2024-2314
Assigner: canonical
Published: 2024-03-10T22:54:31.563Z
State: PUBLISHED
affected: packageName: bcc
product: BPF Compiler Collection
vendor: IOVisor
repo: https://github.com/iovisor/bcc
platforms: Linux
versions: status: affected
version: 0
lessThan: 008ea09e891194c072f2a9305a3c872a241dc342
versionType: commit-id
descriptions: value: If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.
credits: type: finder
value: Mark Esler
type: analyst
value: Seth Arnold
type: remediation developer
value: Brendan Gregg
metrics: format: CVSS
cvssV3_1: version: 3.1
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
baseScore: 2.8
baseSeverity: LOW