CVE-2010-0411

Published: Feb 8, 2010Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.

Affected (1)

Products: Systemtap: Systemtap

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Systemtap Systemtap	Version 1.1

Related CWEs

References (36)

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html

Source: secalert@redhat.com

http://marc.info/?l=oss-security&m=126530657715364&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/38426

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38680

Source: secalert@redhat.com

http://secunia.com/advisories/38765

Source: secalert@redhat.com

http://secunia.com/advisories/38817

Source: secalert@redhat.com

http://secunia.com/advisories/39656

Source: secalert@redhat.com

http://securitytracker.com/id?1023664

Source: secalert@redhat.com

http://sourceware.org/bugzilla/show_bug.cgi?id=11234

Source: secalert@redhat.com

http://sourceware.org/git/gitweb.cgi?p=systemtap.git%3Ba=commit%3Bh=a2d399c87a642190f08ede63dc6fc434a5a8363a

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0124.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0125.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/38120

Source: secalert@redhat.com

Exploit

http://www.vupen.com/english/advisories/2010/1001

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=559719

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9675

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=oss-security&m=126530657715364&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/38426

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38680

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/38765

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/38817

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39656

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1023664

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceware.org/bugzilla/show_bug.cgi?id=11234

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceware.org/git/gitweb.cgi?p=systemtap.git%3Ba=commit%3Bh=a2d399c87a642190f08ede63dc6fc434a5a8363a

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0124.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0125.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/38120

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2010/1001

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=559719

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9675

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.