Lucene search

K
cve[email protected]CVE-2012-0875
HistoryFeb 04, 2014 - 11:55 p.m.

CVE-2012-0875

2014-02-0423:55:03
CWE-264
web.nvd.nist.gov
37
systemtap
cve-2012-0875
information security
kernel memory
denial of service

CVSS2

5.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:P/I:N/A:C

AI Score

5.8

Confidence

Low

EPSS

0

Percentile

5.1%

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data, which triggers a read of an invalid pointer.

Affected configurations

NVD
Node
systemtapsystemtapMatch1.6.7
OR
systemtapsystemtapMatch1.7
VendorProductVersionCPE
systemtapsystemtap1.6.7cpe:/a:systemtap:systemtap:1.6.7:::
systemtapsystemtap1.7cpe:/a:systemtap:systemtap:1.7:::

CVSS2

5.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:P/I:N/A:C

AI Score

5.8

Confidence

Low

EPSS

0

Percentile

5.1%