ByteOS Network

Vulnerability Details :

CVE-2024-2314

Assigner Org ID-cc1ad9ee-3454-478d-9317-d3e869d708bc

Published At-10 Mar, 2024 | 22:54

Updated At-30 Oct, 2024 | 18:04

If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:canonical

Assigner Org ID:cc1ad9ee-3454-478d-9317-d3e869d708bc

Published At:10 Mar, 2024 | 22:54

Updated At:30 Oct, 2024 | 18:04

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

IOVisor

Product

BPF Compiler Collection

Package Name

bcc

Repo

https://github.com/iovisor/bcc

Platforms

Linux

Versions

Affected

From 0 before 008ea09e891194c072f2a9305a3c872a241dc342 (commit-id)

Metrics

Version	Base score	Base severity	Vector
3.1	2.8	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

Version: 3.1

Base score: 2.8

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

Credits

finder

Mark Esler

analyst

Seth Arnold

remediation developer

Brendan Gregg

References

Hyperlink	Resource
https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342	patch
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314	issue-tracking

Hyperlink: https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342

Resource:

patch

Hyperlink: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314

Resource:

issue-tracking

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342	patch x_transferred
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314	issue-tracking x_transferred

Hyperlink: https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342

Resource:

patch

x_transferred

Hyperlink: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314

Resource:

issue-tracking

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-noinfo	CWE-noinfo Not enough information

Type: CWE

CWE ID: CWE-noinfo

Description: CWE-noinfo Not enough information

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@ubuntu.com

Published At:10 Mar, 2024 | 23:15

Updated At:26 Aug, 2025 | 17:18

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	2.8	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
Primary	3.1	2.5	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Type: Secondary

Version: 3.1

Base score: 2.8

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

Type: Primary

Version: 3.1

Base score: 2.5

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

CPE Matches

iovisor>>bpf_compiler_collection>>Versions before 0.30.0(exclusive)

cpe:2.3:a:iovisor:bpf_compiler_collection:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>-

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314	security@ubuntu.com	Third Party Advisory
https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342	security@ubuntu.com	Patch
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342	af854a3a-2127-422b-91ae-364da2661108	Patch

Hyperlink: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314

Source: security@ubuntu.com

Resource:

Third Party Advisory

Hyperlink: https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342

Source: security@ubuntu.com

Resource:

Patch

Hyperlink: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Similar CVEs

1Records found

CVE-2024-1656

Matching Score-6

Assigner-Octopus Deploy

View Details

Matching Score-6

Assigner-Octopus Deploy

CVSS Score-2.6||LOW

EPSS-0.11% / 29.47%

7 Day CHG~0.00%

Published-11 Sep, 2024 | 04:05

Updated-02 Jul, 2025 | 17:26

Affected versions of Octopus Server had a weak content security policy.

Vendor-Octopus Deploy Pty. Ltd.Linux Kernel Organization, Inc Microsoft Corporation

Product-linux_kernel windows octopus_server Octopus Server

CVE-2024-2314

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs