CVE-2009-2911
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data...
CVE-2009-2911 is a low vulnerability (CVSS 1.9) in Systemtap, published October 22, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in systemtap 1.0-2.
- Severity
- 1.9 LowCVSS 2.0, NVD
- Exploit chance
- 0.46%EPSS, 40th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.0-2systemtap +3 more
Description
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
- Record
CVE-2009-2911- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
- Record
CVE-2009-2911- Updated
- 2026-11-02
EUVDEUVD-2009-2899No score
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
- Record
EUVD-2009-2899- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pq5x-qrx9-87q4No score
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data...
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
- Record
GHSA-pq5x-qrx9-87q4- Updated
- 2026-11-02
OSVNo score
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
- Record
CVE-2009-2911- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-2911No score
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
- Record
DEBIAN-CVE-2009-2911- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10506-1No score
systemtap-3.0-1.6 on GA media
These are all security issues fixed in the systemtap-3.0-1.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10506-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
sources.redhat.com/bugzilla/show_bug.cgi?id=10750
redhat.com/archives/fedora-package-announce/2009-October/msg00793.html
gcc.gnu.org/bugzilla/show_bug.cgi?id=41633
openwall.com/lists/oss-security/2009/10/21/1
bugzilla.redhat.com/show_bug.cgi?id=529175
Show 10 moreShow less
secunia.com/advisories/37167
securityfocus.com/bid/36778
vupen.com/english/advisories/2009/2989
nvd.nist.gov/vuln/detail/CVE-2009-2911
github.com/advisories/GHSA-pq5x-qrx9-87q4
security-tracker.debian.org/tracker/CVE-2009-2911
suse.com/security/cve/CVE-2009-2911