CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:N/I:N/A:P
EPSS
Percentile
5.1%
CentOS Errata and Security Advisory CESA-2011:0841
SystemTap is an instrumentation system for systems running the Linux
kernel, version 2.6. Developers can write scripts to collect data on the
operation of the system.
A divide-by-zero flaw was found in the way SystemTap handled malformed
debugging information in DWARF format. When SystemTap unprivileged mode was
enabled, an unprivileged user in the stapusr group could use this flaw to
crash the system. Additionally, a privileged user (root, or a member of the
stapdev group) could trigger this flaw when tricked into instrumenting a
specially-crafted ELF binary, even when unprivileged mode was not enabled.
(CVE-2011-1769)
SystemTap users should upgrade to these updated packages, which contain a
backported patch to correct this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2011-May/079763.html
https://lists.centos.org/pipermail/centos-announce/2011-May/079764.html
Affected packages:
systemtap
systemtap-client
systemtap-initscript
systemtap-runtime
systemtap-sdt-devel
systemtap-server
systemtap-testsuite
Upstream details at:
https://access.redhat.com/errata/RHSA-2011:0841
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 5 | i386 | systemtap | < 1.3-4.el5_6.1 | systemtap-1.3-4.el5_6.1.i386.rpm |
CentOS | 5 | i386 | systemtap-client | < 1.3-4.el5_6.1 | systemtap-client-1.3-4.el5_6.1.i386.rpm |
CentOS | 5 | i386 | systemtap-initscript | < 1.3-4.el5_6.1 | systemtap-initscript-1.3-4.el5_6.1.i386.rpm |
CentOS | 5 | i386 | systemtap-runtime | < 1.3-4.el5_6.1 | systemtap-runtime-1.3-4.el5_6.1.i386.rpm |
CentOS | 5 | i386 | systemtap-sdt-devel | < 1.3-4.el5_6.1 | systemtap-sdt-devel-1.3-4.el5_6.1.i386.rpm |
CentOS | 5 | i386 | systemtap-server | < 1.3-4.el5_6.1 | systemtap-server-1.3-4.el5_6.1.i386.rpm |
CentOS | 5 | i386 | systemtap-testsuite | < 1.3-4.el5_6.1 | systemtap-testsuite-1.3-4.el5_6.1.i386.rpm |
CentOS | 5 | x86_64 | systemtap | < 1.3-4.el5_6.1 | systemtap-1.3-4.el5_6.1.x86_64.rpm |
CentOS | 5 | x86_64 | systemtap-client | < 1.3-4.el5_6.1 | systemtap-client-1.3-4.el5_6.1.x86_64.rpm |
CentOS | 5 | x86_64 | systemtap-initscript | < 1.3-4.el5_6.1 | systemtap-initscript-1.3-4.el5_6.1.x86_64.rpm |