CVE-2011-2502

Name	CVE-2011-2502
Description	runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	635542

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
systemtap (PTS)	bullseye	4.4-2	fixed
	bookworm	4.8-2	fixed
	trixie	5.1-5	fixed
	forky, sid	5.3-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
systemtap	source	lenny	(not affected)
systemtap	source	squeeze	(not affected)
systemtap	source	(unstable)	1.6-1	635542

[lenny] - systemtap <not-affected> (Affected option introduced in 1.4)
[squeeze] - systemtap <not-affected> (Affected option introduced in 1.4)