Skip to content
OpenAdvisories
Unscored CVE-2009-2911 EUVD-2009-2899GHSA-pq5x-qrx9-87q4

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause…

Published Oct 22, 2009 · Updated Aug 7, 2024 · Assigned by redhat

Description

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 systemtap 1.0-2 —
Debian 13 systemtap 1.0-2 —
Debian 12 systemtap 1.0-2 —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed systemtap 3.0-1.6 openSUSE-SU-2024:10506-1

Advisories 1

References