CVE-2009-0784
systemtap - local privilege escalation
EPSS 0.04%
Description
Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
How to fix CVE-2009-0784
To remediate CVE-2009-0784, upgrade the affected package to a fixed version below.
- Debian/systemtap—upgrade to 0.0.20090314-2 or later
- Debian/systemtap—upgrade to 0.0.20080705-1+lenny1 or later
Is CVE-2009-0784 being exploited?
Low — EPSS is 0.0%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 0.0.20090314-2
- from 0, < 0.0.20080705-1+lenny1