SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data, which triggers a read of an invalid pointer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade systemtap-runtimeUpgrade systemtap-testsuiteUpgrade systemtap-initscriptUpgrade systemtap-grapherUpgrade systemtap-serverUpgrade systemtap-sdt-develUpgrade systemtap | Dec 1, 2016 | Feb 4, 2014 |
| Debian | — | Upgrade systemtap | Jul 30, 2024 | Feb 4, 2014 |
| Gentoo Linux | — | Upgrade dev-util/systemtap. | Oct 30, 2017 | Feb 4, 2014 |
| Oracle_linux | — | Upgrade systemtap-initscriptUpgrade systemtap-testsuiteUpgrade systemtap-serverUpgrade systemtap-runtimeUpgrade systemtap-grapherUpgrade systemtap-sdt-develUpgrade systemtap | Oct 16, 2024 | Feb 4, 2014 |
| Suse | — | Upgrade systemtapUpgrade systemtap-server | Dec 12, 2013 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub