The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade systemtap | Jul 30, 2024 | Oct 22, 2009 |
| Suse | — | Upgrade systemtap-clientUpgrade systemtap-runtimeUpgrade systemtap-serverUpgrade systemtap-sdt-develUpgrade systemtap | Dec 12, 2013 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub