[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2011-1769Date: (C)2011-08-29   (M)2023-12-22


SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 1.2
Exploit Score: 1.9
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: HIGH
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECUNIA-44802
BID-47934
MDVSA-2011:154
MDVSA-2011:155
RHSA-2011:0842
http://openwall.com/lists/oss-security/2011/05/20/2
http://sourceware.org/git/?p=systemtap.git%3Ba=commit%3Bh=fa2e3415185a28542d419a641ecd6cddd52e3cd9
https://bugzilla.redhat.com/show_bug.cgi?id=702687

CWE    1
CWE-189
OVAL    9
oval:org.secpod.oval:def:500022
oval:org.secpod.oval:def:103152
oval:org.secpod.oval:def:500202
oval:org.secpod.oval:def:200554
...

© SecPod Technologies