CVE-2009-4273: Systemtap

High severity, CVSS 10.0. EPSS: 17.7% chance of exploitation in the next 30 days.

stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.

Affected products

• Systemtap Systemtap: up to and including 1.0; version 0.2.2 only; version 0.3 only; version 0.4 only; version 0.5 only; version 0.5.3 only; …

Published 2010-01-26. Last modified 2026-06-16.