Systemtap

12 CVEs across 1 Systemtap products. Browse Systemtap vulnerabilities, severities, and proof-of-concept exploits.

Systemtap products with known CVEs

ProductCVEs
Systemtap12
Systemtap CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2012-08752014-02-04SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or…
CVE-2011-25032012-07-26The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a modu…
CVE-2011-25022012-07-26runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specif…
CVE-2011-17812011-08-29SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted E…
CVE-2011-17692011-08-29SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via…
CVE-2010-41712010-12-07The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denia…
CVE-2010-41702010-12-07The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by set…
CVE-2010-04122010-02-25stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vector…
CVE-2010-04112010-02-08Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to c…
CVE-2009-42732010-01-26stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.
CVE-2009-29112009-10-22SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service…
CVE-2009-07842009-03-25Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules an…