CVE-2012-0875

Related Files

Gentoo Linux Security Advisory 201406-04

Posted Jun 5, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201406-4 - A vulnerability in SystemTap could allow a local attacker to create a Denial of Service condition. Versions less than 2.0 are affected.

tags | advisory, denial of service, local

systems | linux, gentoo

advisories | CVE-2012-0875

SHA-256 | 5774848268ed598deea8853ebd682bedcfd62be4a13af00f35a2e21e1ad4385f

Download | Favorite | View

Red Hat Security Advisory 2012-0376-01

Posted Mar 9, 2012

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2012-0376-01 - SystemTap is an instrumentation system for systems running the Linux kernel. The system allows developers to write scripts to collect data on the operation of the system. An invalid pointer read flaw was found in the way SystemTap handled malformed debugging information in DWARF format. When SystemTap unprivileged mode was enabled, an unprivileged user in the stapusr group could use this flaw to crash the system or, potentially, read arbitrary kernel memory. Additionally, a privileged user could trigger this flaw when tricked into instrumenting a specially-crafted ELF binary, even when unprivileged mode was not enabled.

tags | advisory, arbitrary, kernel

systems | linux, redhat

advisories | CVE-2012-0875

SHA-256 | e422ced8c0db13d83d39754c32ac7ba21d17c4d96665817fad593c0d7a570d7d

Download | Favorite | View