CVE-2011-2502
EPSS 0.08%Published: 7/26/2012Modified: 4/28/2026
Also known as:DEBIAN-CVE-2011-2502
Description
runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument.
Affected packages (1)
- Debian/systemtapfrom 0, < 1.6-1