Systemtap
Systemtap: vulnerabilidades y CVE
Systemtap tiene 12 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2012-0875 | Media (5.4) | 0.35% | — | 4 feb 2014 | SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via… |
| CVE-2011-2503 | Baja (3.7) | 0.44% | — | 26 jul 2012 | The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain… |
| CVE-2011-2502 | Media (4.4) | 0.52% | — | 26 jul 2012 | runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local… |
| CVE-2011-1781 | Baja (1.2) | 0.30% | — | 29 ago 2011 | SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly… |
| CVE-2011-1769 | Baja (1.2) | 0.29% | — | 29 ago 2011 | SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not… |
| CVE-2010-4171 | Baja (2.1) | 0.40% | — | 7 dic 2010 | The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules). |
| CVE-2010-4170 | Alta (7.2) | 5.3% | — | 7 dic 2010 | The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a… |
| CVE-2010-0412 | Alta (7.5) | 1.7% | — | 25 feb 2010 | stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different… |
| CVE-2010-0411 | Media (4.9) | 0.95% | — | 8 feb 2010 | Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or… |
| CVE-2009-4273 | Alta (10) | 18% | — | 26 ene 2010 | stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request. |
| CVE-2009-2911 | Baja (1.9) | 0.46% | — | 22 oct 2009 | SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large… |
| CVE-2009-0784 | Media (6.3) | 0.26% | — | 25 mar 2009 | Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors. |