Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Untriaged
Permalink CVE-2024-2314
2.8 LOW
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): HIGH
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): CHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): NONE
  • Availability impact (A): LOW
created 6 months ago
If kernel headers need to be extracted, bcc will attempt …

If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

References

Affected products

bcc
  • <008ea09e891194c072f2a9305a3c872a241dc342

Matching in nixpkgs

pkgs.bcc

Dynamic Tracing Tools for Linux

  • nixos-unstable -

pkgs.libccd

Library for collision detection between two convex shapes

  • nixos-unstable -

pkgs.doom-bcc

Compiler for Doom/Hexen scripts (ACS, BCS)

Package maintainers