Vulnerability in Systemtap
CVE-2009-2911
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 1.9 (Low). Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.005 (37.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 37th percentile — 37.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Systemtap — versions 1.0
Weakness classification (CWE)
References
- sources.redhat.com/bugzilla/show_bug.cgi (Exploit)
- www.redhat.com/archives/fedora-package-announce/2009-October/msg00793.html (vendor-advisory)
- gcc.gnu.org/bugzilla/show_bug.cgi
- www.openwall.com/lists/oss-security/2009/10/21/1 (mailing-list, Patch)
- www.redhat.com/archives/fedora-package-announce/2009-October/msg00627.html (vendor-advisory)
- bugzilla.redhat.com/show_bug.cgi
- secunia.com/advisories/37167 (third-party-advisory)
- www.securityfocus.com/bid/36778 (vdb-entry)
- www.vupen.com/english/advisories/2009/2989 (vdb-entry, Vendor Advisory)