CVE-2012-0875

2014-02-0423:55:03

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

5.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:P/I:N/A:C

AI Score

5.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data, which triggers a read of an invalid pointer.

Affected configurations

Nvd

Node

systemtapsystemtapMatch1.6.7

systemtapsystemtapMatch1.7

VendorProductVersionCPE
systemtapsystemtap1.6.7cpe:2.3:a:systemtap:systemtap:1.6.7:*:*:*:*:*:*:*
systemtapsystemtap1.7cpe:2.3:a:systemtap:systemtap:1.7:*:*:*:*:*:*:*