CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service…

published October 22, 2009

CVSS
—
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00457 · 38.7th percentile
Published
2009-10-22T16:00Z
EPSS history
Timeline
  • 22 OCT 16:00Z
    SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service…
    cvelistv5