CVE-2011-2502

runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is…

published July 26, 2012

CVSS
—
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00520 · 43.0th percentile
Published
2012-07-26T19:00Z
EPSS history
Timeline
  • 26 JUL 19:00Z
    runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is…
    cvelistv5