SystemTap Unprivileged Mode Multiple Denial Of Service Vulnerabilities

Bugtraq ID:	36778
Class:	Boundary Condition Error
CVE:	CVE-2009-2911
Remote:	No
Local:	Yes
Published:	Oct 21 2009 12:00AM
Updated:	Apr 13 2015 10:23PM
Credit:	Jan Lieskovsky
Vulnerable:	SystemTap SystemTap 0.0.20090314 SystemTap SystemTap 0.0.20080705 SystemTap SystemTap 1.0
Not Vulnerable:

SystemTap Unprivileged Mode Multiple Denial Of Service Vulnerabilities

SystemTap is prone to multiple denial-of-service vulnerabilities.

Exploiting these issues may allow attackers to crash the application, denying service to legitimate users. Attackers may be able to leverage some of these vulnerabilities to execute arbitrary code, but this has not been confirmed.

SystemTap 1.0 is vulnerable; other versions may also be affected.

SystemTap Unprivileged Mode Multiple Denial Of Service Vulnerabilities

Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SystemTap Unprivileged Mode Multiple Denial Of Service Vulnerabilities

Solution:
Updates are available. Please see the references for details.

SystemTap Unprivileged Mode Multiple Denial Of Service Vulnerabilities

References:

• Bug 529175 CVE-2009-2911 SystemTap 1.0: Multiple denial of service flaws once -- (Jan Lieskovsky)
  
• CVE assignment notification -- CVE-2009-2911 - Three SystemTap-1.0 DoS issues (Jan Lieskovsky)
  
• SystemTap Homepage (SystemTap)