CVE-2010-4171

Published: Dec 7, 2010Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

Affected (1)

Products: Systemtap: Systemtap

Systemtap

1 product

Systemtap

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Systemtap Systemtap	Version 1.3

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (30)

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051115.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051122.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051127.html

Source: secalert@redhat.com

http://secunia.com/advisories/42256

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42263

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42318

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46920

Source: secalert@redhat.com

http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commit%3Bh=b7565b41228bea196cefa3a7d43ab67f8f9152e2

Source: secalert@redhat.com

http://sources.redhat.com/ml/systemtap/2010-q4/msg00230.html

Source: secalert@redhat.com

http://www.debian.org/security/2011/dsa-2348

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0894.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/44917

Source: secalert@redhat.com

http://www.securitytracker.com/id?1024754

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=653606

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/63345

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051115.html