CVE-2009-0784
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the...
CVE-2009-0784 is a medium vulnerability (CVSS 6.3) in Systemtap, published March 25, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. Fixed in systemtap 0.0.20090314-2.
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
6.3
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
- Record
CVE-2009-0784- CVSS 2.0
- 6.3 Medium
AV:L/AC:M/Au:N/C:N/I:C/A:C - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
- Record
CVE-2009-0784- Updated
- 2026-11-02
EUVDEUVD-2009-0782 No score
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
- Record
EUVD-2009-0782- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rcc4-xh8r-mf9w No score
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the...
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
- Record
GHSA-rcc4-xh8r-mf9w- Weakness
- CWE-362
- Updated
- 2026-11-02
OSV No score
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
- Record
CVE-2009-0784- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-0784 No score
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
- Record
DEBIAN-CVE-2009-0784- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
systemtapDebian:12 |
before 0.0.20090314-2 | 0.0.20090314-2 |
systemtapDebian:13 |
before 0.0.20090314-2 | 0.0.20090314-2 |
systemtapDebian:14 |
before 0.0.20090314-2 | 0.0.20090314-2 |
systemtapDebian:5.0 |
before 0.0.20080705-1+lenny1, plus listed versions 0.0.20080705-1 |
0.0.20080705-1+lenny1 |
systemtapRed Hat:enterprise_linux:4::as |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-runtimeRed Hat:enterprise_linux:4::as |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-testsuiteRed Hat:enterprise_linux:4::as |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtapRed Hat:enterprise_linux:4::desktop |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
systemtap-runtimeRed Hat:enterprise_linux:4::desktop |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-testsuiteRed Hat:enterprise_linux:4::desktop |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtapRed Hat:enterprise_linux:4::es |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-runtimeRed Hat:enterprise_linux:4::es |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-testsuiteRed Hat:enterprise_linux:4::es |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtapRed Hat:enterprise_linux:4::ws |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-runtimeRed Hat:enterprise_linux:4::ws |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtap-testsuiteRed Hat:enterprise_linux:4::ws |
before 0:0.6.2-2.el4_7 | 0:0.6.2-2.el4_7 |
systemtapRed Hat:enterprise_linux:5::client |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-clientRed Hat:enterprise_linux:5::client |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-debuginfoRed Hat:enterprise_linux:5::client |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-runtimeRed Hat:enterprise_linux:5::client |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-serverRed Hat:enterprise_linux:5::client |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-testsuiteRed Hat:enterprise_linux:5::client |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtapRed Hat:enterprise_linux:5::server |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-clientRed Hat:enterprise_linux:5::server |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-debuginfoRed Hat:enterprise_linux:5::server |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-runtimeRed Hat:enterprise_linux:5::server |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-serverRed Hat:enterprise_linux:5::server |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
systemtap-testsuiteRed Hat:enterprise_linux:5::server |
before 0:0.7.2-3.el5_3 | 0:0.7.2-3.el5_3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
debian.org/security/2009/dsa-1755
secunia.com/advisories/34479
support.avaya.com/elmodocs2/security/ASA-2009-110.htm
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613
redhat.com/support/errata/RHSA-2009-0373.html
secunia.com/advisories/34548
Show 11 moreShow less
vupen.com/english/advisories/2009/0907
secunia.com/advisories/34441
nvd.nist.gov/vuln/detail/CVE-2009-0784
github.com/advisories/GHSA-rcc4-xh8r-mf9w
security-tracker.debian.org/tracker/CVE-2009-0784
access.redhat.com/errata/RHSA-2009:0373
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=489808
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0373.json
access.redhat.com/security/cve/CVE-2009-0784
cve.org/CVERecord?id=CVE-2009-0784