DEBIAN-CVE-2009-2911
- Source
- https://security-tracker.debian.org/tracker/CVE-2009-2911
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2009-2911.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2009-2911
- Upstream
- Published
- 2009-10-22T16:30:00Z
- Modified
- 2026-09-17T06:47:31Z
- Summary
- [none]
- Details
-
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
- References
Affected packages
Debian:12 / systemtap
Package
- Name
- systemtap
- Purl
- pkg:deb/debian/systemtap?arch=source&distro=bookworm
Debian:13 / systemtap
Package
- Name
- systemtap
- Purl
- pkg:deb/debian/systemtap?arch=source&distro=trixie
Debian:14 / systemtap
Package
- Name
- systemtap
- Purl
- pkg:deb/debian/systemtap?arch=source&distro=forky