Red Hat Security AdvisoryRHSA-2011:1088
systemtap security update
Released 2011-07-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) systemtap-1.4-6.el6_1.2, systemtap-client-1.4-6.el6_1.2, systemtap-grapher-1.4-6.el6_1.2 +5
- Red Hat Enterprise Linux Server Optional (v. 6) systemtap-1.4-6.el6_1.2, systemtap-testsuite-1.4-6.el6_1.2
Fixes 2 records
Priority LOW 21
runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local user…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.0052 · Published 2012-07-26 · Fixed CWE-20
Priority LOW 18
The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileg…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00441 · Published 2012-07-26 · Partial fix CWE-20
