Skip to content
Noroxi

systemtap records

12 published records for vendor systemtap.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 8.3%
Pre-auth RCE
1
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    12 records
    • CVE-2009-4273
      45Plan

      stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line argu

      CriticalCVSS 10.0Proof of conceptEPSS 18%

      systemtap · systemtapJan 26, 2010

    • CVE-2010-0412
      31Monitor

      stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecifie

      HighCVSS 7.5No exploitEPSS 2%

      systemtap · systemtapFeb 24, 2010

    • CVE-2010-4170
      30Monitor

      The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gai

      HighCVSS 7.2WeaponizedEPSS 5%

      systemtap · systemtapDec 7, 2010

    • CVE-2009-0784
      25Monitor

      Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTa

      MediumCVSS 6.3No exploitEPSS 0%

      systemtap · systemtapMar 25, 2009

    • CVE-2012-0875
      21Monitor

      SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information fro

      MediumCVSS 5.4No exploitEPSS 0%

      systemtap · systemtapFeb 4, 2014

    • CVE-2010-0411
      19Monitor

      Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 all

      MediumCVSS 4.9Proof of conceptEPSS 1%

      systemtap · systemtapFeb 8, 2010

    • CVE-2011-2502
      17Monitor

      runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a mo

      MediumCVSS 4.4No exploitEPSS 1%

      systemtap · systemtapJul 26, 2012

    • CVE-2011-2503
      14Monitor

      The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not prope

      LowCVSS 3.7No exploitEPSS 0%

      systemtap · systemtapJul 26, 2012

    • CVE-2010-4171
      8Monitor

      The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local use

      LowCVSS 2.1No exploitEPSS 0%

      systemtap · systemtapDec 7, 2010

    • CVE-2009-2911
      7Monitor

      SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause

      LowCVSS 1.9No exploitEPSS 0%

      systemtap · systemtapOct 22, 2009

    • CVE-2011-1781
      4Monitor

      SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OO

      LowCVSS 1.2No exploitEPSS 0%

      systemtap · systemtapAug 29, 2011

    • CVE-2011-1769
      4Monitor

      SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero

      LowCVSS 1.2No exploitEPSS 0%

      systemtap · systemtapAug 29, 2011