The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-356:01 advisory.

    SystemTap is an instrumentation system for systems running Linux 2.6.
    Developers can write instrumentation to collect data on the operation     of the system.
    Security issues fixed with this release:
    CVE-2012-0875     No information available at the time of writing, please refer to the CVE links below.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This respin fixes the CVE-2012-0875 vulnerability.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated systemtap packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

SystemTap is an instrumentation system for systems running the Linux kernel. The system allows developers to write scripts to collect data on the operation of the system.

An invalid pointer read flaw was found in the way SystemTap handled malformed debugging information in DWARF format. When SystemTap unprivileged mode was enabled, an unprivileged user in the stapusr group could use this flaw to crash the system or, potentially, read arbitrary kernel memory. Additionally, a privileged user (root, or a member of the stapdev group) could trigger this flaw when tricked into instrumenting a specially crafted ELF binary, even when unprivileged mode was not enabled. (CVE-2012-0875)

SystemTap users should upgrade to these updated packages, which contain a backported patch to correct this issue.

The remote host is affected by the vulnerability described in GLSA-201406-04 (SystemTap: Denial of Service)

    SystemTap does not properly handle DWARF expressions when unwinding the       stack.
  Impact :

    A local attacker with SystemTap permissions could trigger a kernel       panic, causing a Denial of Service condition.
  Workaround :

    Disabling unprivileged mode is a temporary workaround for this       vulnerability.

This systemtap updated fixes a security issue and bugs :

Security fix: Fix kernel panic when processing malformed DWARF unwind data (bnc#748564 CVE-2012-0875)

Also bugs were fixed :

  - Change how systemtap looks for tracepoint header files     (bnc#796574, new patch:
    systemtap-build-source-dir.patch)

  - Add libebl1 dependency. Systemtap manually loads libebl     backends and the manual Requires: was incorrectly     removed in a previous revision (bnc#800335)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-344:01 advisory.

    SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation     to collect data on the operation of the system.
    Security issues fixed with this release:
     CVE-2012-0875     No information available at the time of writing, please refer to the CVE links below.
    Fixed bugs:
     Upgraded to upstream version 1.6.
     For the with server portion of the SystemTap buildok test suite, the server needs an authorized     certificate for signing the code built by the compiler server. Sometimes, a client running the test suite     never obtained the authorized certificate and additional failures were reported by the test suite compared     to the self-hosted buildok test runs. This has been fixed: results for the with server portion of test     suite match those for the self-hosted test suite.
     To prevent data corruption, the systemtap data structure to track address accesses requires a locking     mechanism. If excessive contention for reading the data structure occured, the spinlocks that were used     could cause kernel panics. The locking mechanism has been changed to rwlock, which fixes this bug.
     The debugfs directory associated with a systemtap script could remain in the system after the script     exited, preventing subsequent scripts from creating their own debugfs directories unless the system was     rebooted. This has been fixed: debugfs directories are removed every time a systemtap script exits.
     The tracepoint names for older kernels' so probe points and newer kernels' irq.stp tapset did not match.
    As a result, the softirq.* probe points were not found on kernels in Asianux Server 3. This has been     fixed.
     The operands in the newest version of user-space markers could sometimes not be parsed, and some tests     failed. The updated systemtap handles those operands as expected now.
     The memory.stp tapset's vm.write_shared_copy probe used by the memory-write_shared_copy.stp test in     systemtap earlier versions was a dummy: it let the test case falsely pass. It later became a real probe     but cannot be resolved on Asianux Server 3 kernel because of incomplete debug information generated by the     gcc compiler and the test would fail and appear as regression. This test case is now designated as a known     failure (KFAIL) and does not appear as a regression any longer.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This collective update for systemtap provides the following fixes :

  - Change how systemtap looks for tracepoint header files.
    (bnc#796574)

  - Systemtap manually loads libebl backends. Add libebl1     dependency. (bnc#800335)

  - Fix kernel panic when processing malformed DWARF unwind     data. (bnc#748564, CVE-2012-0875)

SystemTap is an instrumentation system for systems running the Linux kernel. The system allows developers to write scripts to collect data on the operation of the system.

An invalid pointer read flaw was found in the way SystemTap handled malformed debugging information in DWARF format. When SystemTap unprivileged mode was enabled, an unprivileged user in the stapusr group could use this flaw to crash the system or, potentially, read arbitrary kernel memory. Additionally, a privileged user (root, or a member of the stapdev group) could trigger this flaw when tricked into instrumenting a specially crafted ELF binary, even when unprivileged mode was not enabled. (CVE-2012-0875)

SystemTap users should upgrade to these updated packages, which contain a backported patch to correct this issue.

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0376 advisory.

    SystemTap is an instrumentation system for systems running the Linux     kernel. The system allows developers to write scripts to collect data on     the operation of the system.

    An invalid pointer read flaw was found in the way SystemTap handled     malformed debugging information in DWARF format. When SystemTap     unprivileged mode was enabled, an unprivileged user in the stapusr group     could use this flaw to crash the system or, potentially, read arbitrary     kernel memory. Additionally, a privileged user (root, or a member of the     stapdev group) could trigger this flaw when tricked into instrumenting a     specially-crafted ELF binary, even when unprivileged mode was not enabled.
    (CVE-2012-0875)

    SystemTap users should upgrade to these updated packages, which contain a     backported patch to correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0376 advisory.

    [1.6-5.0.1.el6_2]
    - remove doc/SystemTap_Beginners_Guide/en-US in tarball
    - comment bz683569.patch in specfile
    - remove buildtime dependency on package publican-redhat

    [1.6-5]
    - CVE-2012-0875

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An invalid pointer read flaw was found in the way SystemTap handled malformed debugging information in DWARF format. When SystemTap unprivileged mode was enabled, an unprivileged user in the stapusr group could use this flaw to crash the system or, potentially, read arbitrary kernel memory. Additionally, a privileged user (root, or a member of the stapdev group) could trigger this flaw when tricked into instrumenting a specially crafted ELF binary, even when unprivileged mode was not enabled. (CVE-2012-0875)

ID	Name	Product	Family	Published	Updated	Severity
284211	MiracleLinux 4 : systemtap-1.6-5.0.1.AXS4 (AXSA:2012-356:01)	Nessus	Miracle Linux Local Security Checks	1/14/2026	1/14/2026	critical
58160	Fedora 17 : systemtap-1.7-2.fc17 (2012-2269)	Nessus	Fedora Local Security Checks	2/29/2012	1/11/2021	medium
58294	CentOS 5 / 6 : systemtap (CESA-2012:0376)	Nessus	CentOS Local Security Checks	3/9/2012	1/4/2021	medium
74319	GLSA-201406-04 : SystemTap: Denial of Service	Nessus	Gentoo Local Security Checks	6/5/2014	1/6/2021	medium
74926	openSUSE Security Update : systemtap (openSUSE-SU-2013:0475-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	medium
283905	MiracleLinux 3 : systemtap-1.6-7.AXS3 (AXSA:2012-344:01)	Nessus	Miracle Linux Local Security Checks	1/14/2026	1/14/2026	critical
58126	Fedora 15 : systemtap-1.7-2.fc15 (2012-2218)	Nessus	Fedora Local Security Checks	2/27/2012	1/11/2021	medium
65940	SuSE 11.2 Security Update : systemtap (SAT Patch Number 7444)	Nessus	SuSE Local Security Checks	4/12/2013	1/19/2021	medium
58125	Fedora 16 : systemtap-1.7-2.fc16 (2012-2213)	Nessus	Fedora Local Security Checks	2/27/2012	1/11/2021	medium
61281	Scientific Linux Security Update : systemtap on SL5.x, SL6.x i386/x86_64 (20120308)	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	medium
58298	RHEL 5 / 6 : systemtap (RHSA-2012:0376)	Nessus	Red Hat Local Security Checks	3/9/2012	11/4/2024	high
68494	Oracle Linux 5 / 6 : systemtap (ELSA-2012-0376)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	high
69661	Amazon Linux AMI : systemtap (ALAS-2012-54)	Nessus	Amazon Linux Local Security Checks	9/4/2013	4/18/2018	medium

Detections

Analytics

Plugins Search

critical

medium

medium

medium

medium

critical

medium

medium

medium

medium

high

high

medium