Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12

Export CSV
CVE-2009-0784

systemtap: race condition leads to privilege escalation

Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.

CVSS 2.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Redhat Systemtap
Products
Debian Linux Enterprise Linux Systemtap
CVE-2009-2911

1.0: Multiple denial of service flaws once --unprivileged mode is activated

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Systemtap
Products
Systemtap
CVE-2009-4273

systemtap: remote code execution via stap-server

stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.

CVSS 2.0 · 10.0 Critical EPSS 17.7% KEV · Not listed
Vendors
Redhat Systemtap
Products
Enterprise Linux Systemtap
CVE-2010-0411

systemtap: Crash with systemtap script using __get_argv()

Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Systemtap
Products
Enterprise Linux Systemtap
CVE-2010-0412

systemtap: remote code execution via stap-server

stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Systemtap
Products
Systemtap
CVE-2010-4170

Systemtap: Insecure loading of modules

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

CVSS 2.0 · 7.2 High EPSS 5.8% KEV · Not listed
Vendors
Redhat Systemtap
Products
Enterprise Linux Systemtap
CVE-2010-4171

Systemtap: Ability to remove unused modules by unprivileged user

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Systemtap
Products
Enterprise Linux Systemtap
CVE-2011-1769

systemtap: does not guard against DWARF operations div-by-zero errors, which can cause a kernel panic

SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access.

CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Systemtap
Products
Enterprise Linux Systemtap
CVE-2011-1781

systemtap: divide by zero stack unwinding flaw

SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding (aka backtracing).

CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Systemtap
Products
Enterprise Linux Systemtap
CVE-2011-2502

systemtap: insufficient security check when loading uprobes kernel module

runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Systemtap
Products
Enterprise Linux Systemtap
CVE-2011-2503

systemtap: signed module loading race condition

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.

CVSS 2.0 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Systemtap
Products
Enterprise Linux Systemtap
CVE-2012-0875

systemtap: kernel panic when processing malformed DWARF unwind data

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data, which triggers a read of an invalid pointer.

CVSS 2.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Systemtap
Products
Enterprise Linux Systemtap