The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).
References
Configurations
Information
Published : 2010-12-07 14:00
Updated : 2023-02-12 20:28
NVD link : CVE-2010-4171
Mitre link : CVE-2010-4171
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
systemtap
- systemtap