Security
Security
A vulnerability in SystemTap could allow a local attacker to create a Denial of Service condition.
| Package | dev-util/systemtap on all architectures |
|---|---|
| Affected versions | < 2.0 |
| Unaffected versions | >= 2.0 |
SystemTap is a kernel profiling and instrumentation tool.
SystemTap does not properly handle DWARF expressions when unwinding the stack.
A local attacker with SystemTap permissions could trigger a kernel panic, causing a Denial of Service condition.
Disabling unprivileged mode is a temporary workaround for this vulnerability.
All SystemTap users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-util/systemtap-2.0"
Release date
June 05, 2014
Latest revision
June 05, 2014: 1
Severity
normal
Exploitable
local
Bugzilla entries