PT-2011-3362 · Red Hat · Systemtap+1

CVE-2011-1781 · Publicado 2011-05-31 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SystemTap version 1.4

Description The issue allows local users to cause a denial of service, resulting in a divide-by-zero error and OOPS, by utilizing a crafted ELF program with DWARF expressions that are not properly handled by a stap script performing stack unwinding.

Recommendations For SystemTap version 1.4, consider disabling the unprivileged mode until a patch is available to prevent the denial of service. Restrict access to stap scripts that perform stack unwinding to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-1781

RHSA-2011:0842

RHSA-2011_0842

Produtos afetados

Red Hat

Systemtap

Referências · 29

• https://osv.dev/vulnerability/CVE-2011-1781 · Aviso do Fabricante
• http://securityfocus.com/bid/47934 · Nota
• https://bdu.fstec.ru/vul/2015-06674 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-08746 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-06675 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1781 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2011-1769 · Nota
• https://bdu.fstec.ru/vul/2015-06678 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=702687 · Nota
• https://rhn.redhat.com/errata/RHSA-2011-0842.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-08747 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2011:0842 · Nota
• https://bdu.fstec.ru/vul/2015-06676 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2011-1781 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-1781 · Nota de Segurança