What is the CVSS score of CVE-2024-2313?

CVE-2024-2313 has a CVSS 3.1 base score of 2.8 (Low). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2024-2313?

Yes, a patch is available for CVE-2024-2313. Update the affected software to the latest version immediately.

Bpftrace CVE-2024-2313

LOW

Insecure Temporary File (CWE-377)

2024-03-10 security@ubuntu.com

Information Disclosure Linux Bpftrace

2.8

CVSS 3.1 · Vendor: ubuntu

Severity by source

Vendor (ubuntu) PRIMARY

2.8 LOW

AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

Primary rating from Vendor (ubuntu) · only source for this CVE.

CVSS VectorVendor: ubuntu

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

CVE Published

Mar 10, 2024 - 23:15 cve.org

LOW 2.8

DescriptionCVE.org

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

AnalysisAI

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. Rated low severity (CVSS 2.8).

Technical ContextAI

This vulnerability is classified under CWE-377. If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default. Affected products include: Bpftrace.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.