CVE-2010-4171: Input Validation
A security flaw was found in the way systemtap runtime tool (staprun) removed unused modules. A local attacker could use this flaw to conduct various denial of service attacks.
References: [1] http://sources.redhat.com/ml/systemtap/2010-q4/msg00230.html
Upstream changeset: [2] http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commit;h=b7565b41228bea196cefa3a7d43ab67f8f9152e2
Acknowledgements:
Red Hat would like to thank Tavis Ormandy for reporting this issue.
Other sources
The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4171?
CVE-2010-4171 is classified as a medium severity vulnerability due to its potential for local denial of service attacks.
How do I fix CVE-2010-4171?
To mitigate CVE-2010-4171, users should upgrade to a patched version of SystemTap that addresses this vulnerability.
Who is affected by CVE-2010-4171?
CVE-2010-4171 affects users of SystemTap version 1.3, especially those utilizing the staprun runtime tool.
What types of attacks can be executed through CVE-2010-4171?
A local attacker can perform various denial of service attacks exploiting the vulnerability in CVE-2010-4171.
Is CVE-2010-4171 a remote or local vulnerability?
CVE-2010-4171 is a local vulnerability, requiring an attacker to have local access to the machine.