CVE-2011-2503
SystemTap < 1.6 - Local Privilege Escalation via Race Condition in Module Loading
Title source: llmDescription
The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.
References (6)
Core 6
Core References
Various Sources x_refsource_confirm
http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commitdiff%3Bh=ed51cfa24ca27746ab09b59280b94117dd58cba3
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2503
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2011/dsa-2348
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/46920
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/45377
Various Sources x_refsource_confirm
http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=blob%3Bf=NEWS%3Bhb=304d73b1fea24af791f2a129fb141c5009eae6a8
Scores
EPSS
0.0044
EPSS Percentile
35.6%
Details
CWE
CWE-20
Status
published
Products (30)
systemtap/systemtap
0.2.2
systemtap/systemtap
0.3
systemtap/systemtap
0.4
systemtap/systemtap
0.5
systemtap/systemtap
0.5.3
systemtap/systemtap
0.5.4
systemtap/systemtap
0.5.5
systemtap/systemtap
0.5.7
systemtap/systemtap
0.5.8
systemtap/systemtap
0.5.9
... and 20 more
Published
Jul 26, 2012
Tracked Since
Feb 18, 2026