Published: 08/02/2010 Updated: 13/02/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 495

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
systemtap systemtap 1.1

Debian Bug report logs - #572560 CVE-2010-0412: Inproper restriction of "-B" option Package: systemtap; Maintainer for systemtap is Ritesh Raj Sarraf <rrs@debianorg>; Source for systemtap is src:systemtap (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Thu, 4 Mar 2010 21:24:01 UTC Seve ...

Synopsis Moderate: systemtap security update Type/Severity Security Advisory: Moderate Topic Updated systemtap packages that fix a security issue are now available forRed Hat Enterprise Linux 4This update has been rated as having moderate security impact by the RedHat Security Response Team Descr ...

Synopsis Important: systemtap security update Type/Severity Security Advisory: Important Topic Updated systemtap packages that fix two security issues are now availablefor Red Hat Enterprise Linux 5This update has been rated as having important security impact by the RedHat Security Response Team ...

source: wwwsecurityfocuscom/bid/38120/info SystemTap is prone to multiple local memory-corruption vulnerabilities An attacker may exploit these issues to execute arbitrary code with SYSTEM privileges Failed exploit attempts will result in a denial of service SystemTap 11 is vulnerable; other versions may also be affected #!/bin/b ...

CWE-189 http://secunia.com/advisories/38426 http://marc.info/?l=oss-security&m=126530657715364&w=2 http://www.securityfocus.com/bid/38120 https://bugzilla.redhat.com/show_bug.cgi?id=559719 http://sourceware.org/bugzilla/show_bug.cgi?id=11234 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html http://secunia.com/advisories/38680 http://www.redhat.com/support/errata/RHSA-2010-0125.html http://secunia.com/advisories/38817 http://www.redhat.com/support/errata/RHSA-2010-0124.html http://secunia.com/advisories/38765 http://securitytracker.com/id?1023664 http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html http://www.vupen.com/english/advisories/2010/1001 http://secunia.com/advisories/39656 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9675 http://sourceware.org/git/gitweb.cgi?p=systemtap.git%3Ba=commit%3Bh=a2d399c87a642190f08ede63dc6fc434a5a8363a https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572560 https://nvd.nist.gov https://www.exploit-db.com/exploits/33604/https://access.redhat.com/errata/RHSA-2010:0125

CVE-2010-0411

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect