description: If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.
affected:
{
packageName: bpftrace
product: bpftrace
vendor: bpftrace
repo: https://github.com/bpftrace/bpftrace
platforms: Linux
versions:
status: unaffected, version: 0, lessThan: v0.20.2, versionType: semver
}
metrics:
format: CVSS
cvssV3_1: [
version: 3.1
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
baseScore: 2.8
baseSeverity: LOW
]