PT-2011-3362 · Red Hat · Systemtap+1

Published 2011-05-31 · Updated 2023-02-13 · CVE-2011-1781

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SystemTap version 1.4

Description The issue allows local users to cause a denial of service, resulting in a divide-by-zero error and OOPS, by utilizing a crafted ELF program with DWARF expressions that are not properly handled by a stap script performing stack unwinding.

Recommendations For SystemTap version 1.4, consider disabling the unprivileged mode until a patch is available to prevent the denial of service. Restrict access to stap scripts that perform stack unwinding to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2011-1781

RHSA-2011:0842

RHSA-2011_0842

Affected Products

Red Hat

Systemtap

References · 29

• https://osv.dev/vulnerability/CVE-2011-1781 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06674 · Security Note
• https://bdu.fstec.ru/vul/2015-08746 · Security Note
• https://bdu.fstec.ru/vul/2015-06675 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1781 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06678 · Security Note
• https://rhn.redhat.com/errata/RHSA-2011-0842.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08747 · Security Note
• https://bdu.fstec.ru/vul/2015-06676 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-1781 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1781 · Security Note
• https://bdu.fstec.ru/vul/2015-08745 · Security Note
• https://bdu.fstec.ru/vul/2015-06673 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-0842.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08748 · Security Note