Every CVESearch/Get API key

CVE-2010-4171

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously...

2.1 LowFix available

CVE-2010-4171 is a low vulnerability (CVSS 2.1) in Systemtap, published December 7, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in systemtap 1.2-3.

What does this mean?
Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.40%EPSS, 34th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.2-3systemtap +55 more

Description

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

Exploit likelihood

0.40%Down 1.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
systemtap
Debian:12
before 1.2-3
1.2-3
systemtap
Debian:13
before 1.2-3
1.2-3
systemtap
Debian:14
before 1.2-3
1.2-3
systemtap
Debian:6.0
From an advisory covering 3 CVEs
before 1.2-5+squeeze1, plus listed versions
1.2-5
1.2-5+squeeze1
systemtap
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-client
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-initscript
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-runtime
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-sdt-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
Show 46 moreShow less
Affected packages
PackageAffectedFixed
systemtap-server
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-testsuite
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-client
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-initscript
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-runtime
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-sdt-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-server
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap-testsuite
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:1.1-3.el5_5.3
0:1.1-3.el5_5.3
systemtap
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-sdt-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-server
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-testsuite
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-client
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-grapher
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-initscript
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-runtime
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-grapher
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-sdt-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-server
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-testsuite
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-client
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-initscript
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-runtime
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-testsuite
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-client
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-grapher
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-initscript
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-runtime
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-sdt-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-server
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-testsuite
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-client
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-grapher
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-initscript
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-runtime
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-sdt-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0
systemtap-server
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 0:1.2-11.el6_0
0:1.2-11.el6_0

What each source reports

NVD Score used2.1

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

Record
CVE-2010-4171
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

Record
CVE-2010-4171
Updated
2026-11-02
EUVDEUVD-2010-4147No score

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

Record
EUVD-2010-4147
Updated
2026-11-03
GitHub AdvisoriesGHSA-fq58-jjp6-f46vNo score

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously...

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

Record
GHSA-fq58-jjp6-f46v
Weakness
CWE-20
Updated
2026-11-02
OSVNo score

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

Record
CVE-2010-4171
Updated
2026-11-02
OSVDEBIAN-CVE-2010-4171No score

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

Record
DEBIAN-CVE-2010-4171
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 22 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open