SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data, which triggers a read of an invalid pointer.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade systemtapUpgrade systemtap-serverUpgrade systemtap-sdt-develUpgrade systemtap-testsuiteUpgrade systemtap-runtimeUpgrade systemtap-initscriptUpgrade systemtap-grapher | Dec 1, 2016 | Feb 4, 2014 |
| Debian | — | Upgrade systemtap | Jul 30, 2024 | Feb 4, 2014 |
| Gentoo Linux | — | Upgrade dev-util/systemtap. | Oct 30, 2017 | Feb 4, 2014 |
| Oracle_linux | — | Upgrade systemtap-sdt-develUpgrade systemtap-testsuiteUpgrade systemtap-initscriptUpgrade systemtap-serverUpgrade systemtap-runtimeUpgrade systemtap-grapherUpgrade systemtap | Oct 16, 2024 | Feb 4, 2014 |
| Suse | — | Upgrade systemtapUpgrade systemtap-server | Dec 12, 2013 | Jul 9, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub