SystemTap 1.0 'stat-server' Remote Arbitrary Command Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37842/info SystemTap is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with...

SystemTap 1.0/1.1 '__get_argv()' and '__get_compat_argv()' Local Memory Corruption Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38120/info SystemTap is prone to multiple local memory-corruption vulnerabilities. An attacker may exploit these issues to execute arbitrary code with SYSTEM privileges. Failed exploit attempts will result in a denial of...

systemtap - Local Root Privilege Escalation Vulnerability

No description provided by source. CVE-2010-4170 printf install uprobes /bin/sh exploit.conf; MODPROBEOPTIONS=-C exploit.conf staprun -u whatever RHEL Advisory: https://rhn.redhat.com/errata/RHSA-2010-0894.html...

openSUSE Security Update : systemtap (openSUSE-SU-2013:0475-1)

This systemtap updated fixes a security issue and bugs : Security fix: Fix kernel panic when processing malformed DWARF unwind data bnc748564 CVE-2012-0875 Also bugs were fixed : - Change how systemtap looks for tracepoint header files bnc796574, new patch: systemtap-build-source-dir.patch - Add...

SystemTap: Denial of service

Background SystemTap is a kernel profiling and instrumentation tool. Description SystemTap does not properly handle DWARF expressions when unwinding the stack. Impact A local attacker with SystemTap permissions could trigger a kernel panic, causing a Denial of Service condition. Workaround...

GLSA-201406-04 : SystemTap: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201406-04 SystemTap: Denial of Service SystemTap does not properly handle DWARF expressions when unwinding the stack. Impact : A local attacker with SystemTap permissions could trigger a kernel panic, causing a Denial of Service...

CVE-2012-0875

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service kernel panic and crash via vectors related to crafted DWARF data, which triggers a read of an invalid pointer...

DEBIAN-CVE-2012-0875

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service kernel panic and crash via vectors related to crafted DWARF data, which triggers a read of an invalid pointer...

CVE-2012-0875

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service kernel panic and crash via vectors related to crafted DWARF data, which triggers a read of an invalid pointer...

Null pointer dereference

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service kernel panic and crash via vectors related to crafted DWARF data, which triggers a read of an invalid pointer...

CVE-2012-0875

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service kernel panic and crash via vectors related to crafted DWARF data, which triggers a read of an invalid pointer...

CVE-2012-0875

Affected software: SystemTap (examples cited: 1.7, 1.6.7; other versions likely affected). Vulnerability cause: When unprivileged mode is enabled, crafted DWARF data can trigger an invalid pointer read, enabling local users to read kernel memory or cause a kernel panic/DoS. Impact: Local informat...

CVE-2012-0875

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service kernel panic and crash via vectors related to crafted DWARF data, which triggers a read of an invalid pointer...

CVE-2012-0875

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service kernel panic and crash via vectors related to crafted DWARF data, which triggers a read of an invalid pointer...

Amazon Linux AMI : systemtap (ALAS-2012-54)

An invalid pointer read flaw was found in the way SystemTap handled malformed debugging information in DWARF format. When SystemTap unprivileged mode was enabled, an unprivileged user in the stapusr group could use this flaw to crash the system or, potentially, read arbitrary kernel memory...

Oracle Linux 4 : systemtap (ELSA-2010-0125)

From Red Hat Security Advisory 2010:0125 : Updated systemtap packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SystemTap is an instrumentation system for systems...

Oracle Linux 6 : systemtap (ELSA-2011-1088)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1088 advisory. 1.4.6.0.1.el61.2 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile 1.4-6.2 - bz716476 patch - bz716489 patch...

Oracle Linux 5 : systemtap (ELSA-2011-0841)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0841 advisory. 1.3-4.1 - bz702687 patch Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 5 : systemtap (ELSA-2009-0373)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-0373 advisory. 0.7.2-3.0.1.el53 - Add oracle-enterprise.patch 0.7.2-3 - Resolves: bug 489979, CVE-2009-0784 Tenable has extracted the preceding description block directly from...

Oracle Linux 6 : systemtap (ELSA-2011-0842)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0842 advisory. 1.4.6.0.1.el61.1 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile 1.3-4.1 - bz702687 patch Tenable has...