CVE-2024-2313
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-2313
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2313.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-2313
- Downstream
- Related
- Published
- 2024-03-10T23:15:53Z
- Modified
- 2025-10-16T06:05:59.551588Z
- Severity
-
- 2.8 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L CVSS Calculator
- Summary
- [none]
- Details
-
If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.
- References
Affected packages
Git / github.com/bpftrace/bpftrace
Affected ranges
- Type
- GIT
- Repo
- https://github.com/bpftrace/bpftrace
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Type
- GIT
- Repo
- https://github.com/iovisor/bpftrace
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
v0.*
v0.10.0
v0.11.0
v0.12.0
v0.13.0
v0.14.0
v0.15.0
v0.16.0
v0.17.0
v0.18.0
v0.19.0
v0.20.0
v0.20.1
v0.8
v0.9
v0.9.1
v0.9.2
v0.9.4
Database specific
{
"vanir_signatures": [
{
"id": "CVE-2024-2313-08407fea",
"signature_type": "Line",
"target": {
"file": "src/utils.h"
},
"deprecated": false,
"digest": {
"line_hashes": [
"327864888594507521431347385666633549583",
"123572721077134179399466502772289195350",
"52036561074356888448869913097212083853",
"317722560203614375779409392082292969539"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"
},
{
"id": "CVE-2024-2313-285dd66f",
"signature_type": "Function",
"target": {
"file": "src/utils.cpp",
"function": "unpack_kheaders_tar_xz"
},
"deprecated": false,
"digest": {
"length": 1163.0,
"function_hash": "233568578433815806762396599749207792797"
},
"signature_version": "v1",
"source": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"
},
{
"id": "CVE-2024-2313-4968d760",
"signature_type": "Line",
"target": {
"file": "tests/utils.cpp"
},
"deprecated": false,
"digest": {
"line_hashes": [
"67095913419947930890621096251067623123",
"151559536440870018989664538521203853114",
"108587633537507210242609878158511307392"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"
},
{
"id": "CVE-2024-2313-dfc215d8",
"signature_type": "Line",
"target": {
"file": "src/utils.cpp"
},
"deprecated": false,
"digest": {
"line_hashes": [
"209874247025352342332852865408042810072",
"298474004178131285599867067361581727061",
"219108163671689240524988520164944864975",
"72684606142526721658514406393481846705",
"35231260135326994823184017233146956878",
"59279459125384092176446519857562695860",
"309101051014571176821087366080560426052",
"49221727859306647805062350553137868226",
"220664888342198764940220326925173838507",
"40189470356144410531771659300499901762",
"150893955924231537751755550706728730190",
"203535591736040787865921227579096605724",
"177069320596252459210126342634744588008",
"233005105519457840472290335911182629729",
"251228999392910743798344697450285438652",
"30133262550385182328722510428899091875",
"205001273506854495361922645576476737204",
"15764449439038189634831157869924398434",
"128229921313425805590939627954174530380",
"31025591008693528063430758853325870621",
"102453935618519354345110838792444012627"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"
}
]
}