Every CVE Search/ Get API key

CVE-2011-2503

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool ...

3.7 LowFix available

CVE-2011-2503 is a low vulnerability (CVSS 3.7) in Systemtap, published November 17, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in systemtap 1.6-1.

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.

Exploit likelihood

0.44%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.7

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.

Record
CVE-2011-2503
CVSS 2.0
3.7 LowAV:L/AC:H/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.

Record
CVE-2011-2503
Updated
2026-11-02
EUVDEUVD-2011-2490 No score

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.

Record
EUVD-2011-2490
Updated
2026-11-03
GitHub AdvisoriesGHSA-q2gw-mhhj-386x No score

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool ...

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.

Record
GHSA-q2gw-mhhj-386x
Weakness
CWE-20
Updated
2026-11-02
OSV No score

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.

Record
CVE-2011-2503
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2503 No score

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.

Record
DEBIAN-CVE-2011-2503
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
systemtap
Debian:12
 before 1.6-1
1.6-1
systemtap
Debian:13
 before 1.6-1
1.6-1
systemtap
Debian:14
 before 1.6-1
1.6-1
systemtap
Debian:6.0
 before 1.2-5+squeeze1, plus listed versions
1.2-5
1.2-5+squeeze1
systemtap
Red Hat:enterprise_linux:6::server
 before 0:1.4-6.el6_1.2
0:1.4-6.el6_1.2
systemtap-client
Red Hat:enterprise_linux:6::server
 before 0:1.4-6.el6_1.2
0:1.4-6.el6_1.2
systemtap-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.4-6.el6_1.2
0:1.4-6.el6_1.2
systemtap-grapher
Red Hat:enterprise_linux:6::server
 before 0:1.4-6.el6_1.2
0:1.4-6.el6_1.2
systemtap-initscript
Red Hat:enterprise_linux:6::server
 before 0:1.4-6.el6_1.2
0:1.4-6.el6_1.2
systemtap-runtime
Red Hat:enterprise_linux:6::server
 before 0:1.4-6.el6_1.2
0:1.4-6.el6_1.2
Show 19 moreShow less
Affected packages
PackageAffectedFixed
systemtap-sdt-devel
Red Hat:enterprise_linux:6::server
 before 0:1.4-6.el6_1.2
0:1.4-6.el6_1.2
systemtap-server
Red Hat:enterprise_linux:6::server
 before 0:1.4-6.el6_1.2
0:1.4-6.el6_1.2
systemtap-testsuite
Red Hat:enterprise_linux:6::server
 before 0:1.4-6.el6_1.2
0:1.4-6.el6_1.2
systemtap
Red Hat:enterprise_linux:5::client
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-client
Red Hat:enterprise_linux:5::client
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-initscript
Red Hat:enterprise_linux:5::client
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-runtime
Red Hat:enterprise_linux:5::client
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-sdt-devel
Red Hat:enterprise_linux:5::client
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-server
Red Hat:enterprise_linux:5::client
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-testsuite
Red Hat:enterprise_linux:5::client
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap
Red Hat:enterprise_linux:5::server
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-client
Red Hat:enterprise_linux:5::server
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-initscript
Red Hat:enterprise_linux:5::server
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-runtime
Red Hat:enterprise_linux:5::server
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-sdt-devel
Red Hat:enterprise_linux:5::server
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-server
Red Hat:enterprise_linux:5::server
 before 0:1.3-9.el5
0:1.3-9.el5
systemtap-testsuite
Red Hat:enterprise_linux:5::server
 before 0:1.3-9.el5
0:1.3-9.el5

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 17 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open