systemtap: insufficient security check when loading uprobes kernel module

runtime/staprun/staprunfuncs.c in the systemtap runtime tool staprun in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search pat...

Moderate: Red Hat Security Advisory: systemtap security update

Updated systemtap packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

systemtap: signed module loading race condition

The insertmodule function in runtime/staprun/staprunfuncs.c in the systemtap runtime tool staprun in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module...

Moderate: Red Hat Security Advisory: systemtap security update

Updated systemtap packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

systemtap security update

1.4.6.0.1.el61.2 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile 1.4-6.2 - bz716476 patch - bz716489 patch...

RedHat Update for systemtap RHSA-2011:0841-01

Check for the Version of systemtap OpenVAS Vulnerability Test RedHat Update for systemtap RHSA-2011:0841-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for systemtap RHSA-2011:0841-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for systemtap FEDORA-2011-7302

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for systemtap FEDORA-2011-7289

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for systemtap FEDORA-2011-7302

Check for the Version of systemtap OpenVAS Vulnerability Test Fedora Update for systemtap FEDORA-2011-7302 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for systemtap FEDORA-2011-7289

Check for the Version of systemtap OpenVAS Vulnerability Test Fedora Update for systemtap FEDORA-2011-7289 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

systemtap security update

1.4.6.0.1.el61.1 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile 1.3-4.1 - bz702687 patch...

RHEL 5 : systemtap (RHSA-2011:0841)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0841 advisory. - systemtap: does not guard against DWARF operations div-by-zero errors, which can cause a kernel panic CVE-2011-1769 Note that Nessus has not tested...

RHEL 6 : systemtap (RHSA-2011:0842)

Updated systemtap packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

systemtap security update

CentOS Errata and Security Advisory CESA-2011:0841 Updated systemtap packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

systemtap: does not guard against DWARF operations div-by-zero errors, which can cause a kernel panic

SystemTap 1.4 and earlier, when unprivileged aka stapusr mode is enabled, allows local users to cause a denial of service divide-by-zero error and OOPS via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access...

Moderate: Red Hat Security Advisory: systemtap security update

Updated systemtap packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: systemtap security update

Updated systemtap packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

systemtap: divide by zero stack unwinding flaw

SystemTap 1.4, when unprivileged aka stapusr mode is enabled, allows local users to cause a denial of service divide-by-zero error and OOPS via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding aka backtracing...

PT-2011-1123 · Red Hat · Systemtap +1

Name of the Vulnerable Software and Affected Versions: SystemTap versions 1.4 and earlier Description: The issue allows local users to cause a denial of service via a crafted ELF program with DWARF expressions that are not properly handled by a stap script, leading to a divide-by-zero error and...