Red Hat Fedora

ソフト名：Red Hat Fedora 14 (SystemTap 1.6未満)

回避策：FEDORA-2011-9739にて対応

脆弱性：権限の昇格

ソース：

http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063230.html

http://secunia.com/advisories/45377/

http://secunia.com/advisories/45490/

http://dvw-j.blogspot.com/2011/07/systemtap-red-hat-enterprise-linux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2502

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2503

CVE：CVE-2011-2502, CVE-2011-2503

危険性：Medium Risk

SystemTap, Red Hat Enterprise Linux

ソフト名：SystemTap 1.6未満, Red Hat Enterprise Linux 5 (Server)/Desktop 5/Desktop 6/HPC Node 6/Server 6/Workstation 6

回避策：アップデートにて対応, RHSA-2011:1088-1, RHSA-2011:1089-01にて対応

脆弱性：権限の昇格

ソース：

http://sourceware.org/systemtap/

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2502

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2503

http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commitdiff;h=4ecaadf545a729bb3e5f01f6f019716d49815d9a

http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commitdiff;h=ed51cfa24ca27746ab09b59280b94117dd58cba3

https://rhn.redhat.com/errata/RHSA-2011-1088.html

https://rhn.redhat.com/errata/RHSA-2011-1089.html

http://secunia.com/advisories/45377/

http://secunia.com/advisories/45215/

http://secunia.com/advisories/45387/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2502

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2503

CVE：CVE-2011-2502, CVE-2011-2503

危険性：Medium Risk

Red Hat Enterprise Linux

ソフト名：Red Hat Enterprise Linux 5 (Server)/Desktop 5/Desktop 6/HPC Node 6/Server 6/Workstation 6 (SystemTap 1.4)

回避策：RHSA-2011:0841-01, RHSA-2011:0842-1にて対応

脆弱性：DoS攻撃, ゼロ除算エラー, カーネルのクラッシュ

ソース：http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://rhn.redhat.com/errata/RHSA-2011-0841.html

https://rhn.redhat.com/errata/RHSA-2011-0842.html

http://secunia.com/advisories/44608/

http://secunia.com/advisories/44782/

http://secunia.com/advisories/44802/

http://dvw-j.blogspot.com/2011/05/systemtap.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1769

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1781

CVE：CVE-2011-1769, CVE-2011-1781

危険性：Low Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 13/14 (SystemTap 1.4)

回避策：FEDORA-2011-7289, FEDORA-2011-7302にて対応

脆弱性：DoS攻撃, ゼロ除算エラー, カーネルのクラッシュ

ソース：https://fedoraproject.org/wiki/F13_one_page_release_notes

http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060810.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060790.html

http://secunia.com/advisories/44608/

http://secunia.com/advisories/44731/

http://dvw-j.blogspot.com/2011/05/systemtap.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1769

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1781

CVE：CVE-2011-1769, CVE-2011-1781

危険性：Low Risk

SystemTap

ソフト名：SystemTap 1.4

回避策：あり

脆弱性：DoS攻撃, ゼロ除算エラー, カーネルのクラッシュ

ソース：http://sourceware.org/systemtap/

https://bugzilla.redhat.com/show_bug.cgi?id=702687

http://sourceware.org/git/?p=systemtap.git;a=commit;h=fa2e3415185a28542d419a641ecd6cddd52e3cd9

http://secunia.com/advisories/44608/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1769

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1781

CVE：CVE-2011-1769, CVE-2011-1781

危険性：Low Risk

SystemTap

ソフト名：SystemTap 1.3
回避策：あり
脆弱性：権限の昇格, DoS攻撃
ソース：http://sources.redhat.com/ml/systemtap/2010-q4/msg00230.html
http://sourceware.org/systemtap/
http://www.securityfocus.com/bid/44914
http://www.securityfocus.com/bid/44917
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4170
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4171
https://rhn.redhat.com/errata/RHSA-2010-0894.html
http://secunia.com/advisories/42256
CVE：CVE-2010-4170, CVE-2010-4171
危険性：High Risk

SystemTap

ソフト名：SystemTap 1.1
回避策：未対応
脆弱性：未知の脆弱性
ソース：http://www.securityfocus.com/bid/38316
CVE：CVE-2010-0412
危険性：Medium Risk

SystemTap

SystemTap 1.0
回避策あり
DoS攻撃
CVE-2010-0411
http://secunia.com/advisories/38426
Low Risk