PT-2010-2185 · Red Hat · Systemtap

Publicado 2010-02-25 · Atualizado 2024-06-15 · CVE-2010-0412

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SystemTap version 1.1

Description The issue is related to the stap-server in SystemTap, where it does not properly restrict the value of the -B option, also known as the BUILD option. This allows attackers to have an unspecified impact through vectors associated with executing the make program.

Recommendations For SystemTap version 1.1, consider restricting the use of the -B option to minimize the risk of exploitation. As a temporary workaround, limit the execution of the make program to trusted inputs until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2010-0412

OPENSUSE-SU-2024:10506-1

Produtos afetados

Systemtap

Referências · 14

• http://securityfocus.com/bid/38316 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-0412 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0412 · Nota de Segurança
• https://suse.com/security/cve/CVE-2010-0411 · Nota
• https://suse.com/security/cve/CVE-2009-4273 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0412 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2010-0412 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2009-2911 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56611 · Nota
• https://suse.com/security/cve/CVE-2010-0412 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10506-1 · Aviso do Fabricante