SystemTap DWARF Expression Local Denial of Service Vulnerability

Bugtraq ID:	52121
Class:	Unknown
CVE:	CVE-2012-0875
Remote:	No
Local:	Yes
Published:	Feb 22 2012 12:00AM
Updated:	Apr 16 2015 05:42PM
Credit:	Vincent Danen
Vulnerable:	SystemTap SystemTap 1.4.6 SystemTap SystemTap 1.4 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Gentoo Linux
Not Vulnerable:

SystemTap DWARF Expression Local Denial of Service Vulnerability

SystemTap is prone to local denial-of-service vulnerability.

Local attackers can exploit this issue to cause a kernel panic, denying service to legitimate users.

SystemTap DWARF Expression Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SystemTap DWARF Expression Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

SystemTap DWARF Expression Local Denial of Service Vulnerability

References:

• (CVE-2012-0875) CVE-2012-0875 systemtap: kernel panic when processing malformed (Vincent Danen)
  
• SystemTap Homepage (SystemTap)