[ GLSA 201406-04 ] SystemTap: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: SystemTap: Denial of Service (GLSA 201406-04)
Severity: normal
Exploitable: local
Date: June 05, 2014
Bug(s): #405345
ID: 201406-04

Synopsis

A vulnerability in SystemTap could allow a local attacker to create
a Denial of Service condition.


Background

SystemTap is a kernel profiling and instrumentation tool.

Affected Packages

Package: dev-util/systemtap
Vulnerable: < 2.0
Unaffected: >= 2.0
Architectures: All supported architectures


Description

SystemTap does not properly handle DWARF expressions when unwinding the
stack.


Impact

A local attacker with SystemTap permissions could trigger a kernel
panic, causing a Denial of Service condition.


Workaround

Disabling unprivileged mode is a temporary workaround for this
vulnerability.


Resolution

All SystemTap users should upgrade to the latest version: