Every CVE Search/ Get API key

CVE-2010-4170

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before...

7.2 HighPublic exploitFix available

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Exploit likelihood

5.83%Up 3.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Record
CVE-2010-4170
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Record
CVE-2010-4170
Updated
2026-11-02
EUVDEUVD-2010-4146 No score

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Record
EUVD-2010-4146
Updated
2026-11-03
GitHub AdvisoriesGHSA-j34m-wwxr-2pj4 No score

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before...

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Record
GHSA-j34m-wwxr-2pj4
Updated
2026-11-02
OSV No score

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Record
CVE-2010-4170
Updated
2026-11-02
OSVDEBIAN-CVE-2010-4170 No score

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Record
DEBIAN-CVE-2010-4170
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
systemtap
Debian:12
 before 1.2-3
1.2-3
systemtap
Debian:13
 before 1.2-3
1.2-3
systemtap
Debian:14
 before 1.2-3
1.2-3
systemtap
Debian:6.0
From an advisory covering 3 CVEs
 before 1.2-5+squeeze1, plus listed versions
1.2-5
1.2-5+squeeze1
systemtap
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-client
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-initscript
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-runtime
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-sdt-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
Show 62 moreShow less
Affected packages
PackageAffectedFixed
systemtap-server
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-testsuite
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-client
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-initscript
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-runtime
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-sdt-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-server
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-testsuite
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-sdt-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-server
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-testsuite
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-client
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-grapher
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-initscript
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-runtime
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-grapher
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-sdt-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-server
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-testsuite
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-client
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-initscript
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-runtime
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-testsuite
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-client
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-grapher
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-initscript
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-runtime
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-sdt-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-server
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-testsuite
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-client
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-grapher
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-initscript
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-runtime
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-sdt-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-server
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap
Red Hat:enterprise_linux:4::as
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-runtime
Red Hat:enterprise_linux:4::as
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-testsuite
Red Hat:enterprise_linux:4::as
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap
Red Hat:enterprise_linux:4::desktop
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-runtime
Red Hat:enterprise_linux:4::desktop
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-testsuite
Red Hat:enterprise_linux:4::desktop
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap
Red Hat:enterprise_linux:4::es
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-runtime
Red Hat:enterprise_linux:4::es
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-testsuite
Red Hat:enterprise_linux:4::es
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap
Red Hat:enterprise_linux:4::ws
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-runtime
Red Hat:enterprise_linux:4::ws
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3
systemtap-testsuite
Red Hat:enterprise_linux:4::ws
 before 0:0.6.2-2.el4_8.3
0:0.6.2-2.el4_8.3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitSystemTap MODPROBE_OPTIONS Privilege Escalation2010-11-17
Exploit-DBSystemTap - Local Privilege Escalation2010-11-26
Exploit-DBSystemTap 1.3 - MODPROBE_OPTIONS Privilege Escalation (Metasploit)2019-04-19

History

History
RecordedChangedSources
affected, exploits, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-4170 is a high vulnerability (CVSS 7.2) in Systemtap, published December 7, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.83%, the 93rd percentile. Fixed in systemtap 1.2-3.

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open