SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data, which triggers a read of an invalid pointer.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade systemtapUpgrade systemtap-sdt-develUpgrade systemtap-serverUpgrade systemtap-testsuiteUpgrade systemtap-initscriptUpgrade systemtap-grapherUpgrade systemtap-runtime | Dec 1, 2016 | Feb 4, 2014 |
| Debian | — | Upgrade systemtap | Jul 30, 2024 | Feb 4, 2014 |
| Gentoo Linux | — | Upgrade dev-util/systemtap. | Oct 30, 2017 | Feb 4, 2014 |
| Oracle_linux | — | Upgrade systemtapUpgrade systemtap-serverUpgrade systemtap-initscriptUpgrade systemtap-grapherUpgrade systemtap-testsuiteUpgrade systemtap-runtimeUpgrade systemtap-sdt-devel | Oct 16, 2024 | Feb 4, 2014 |
| Suse | — | Upgrade systemtap-serverUpgrade systemtap | Dec 12, 2013 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub