PT-2011-5232 · Opensuse+4 · Systemtap-Client-Debuginfo+16

Published 1970-01-01 · Updated 2023-02-13 · CVE-2011-4131

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions openSUSE systemtap-runtime-debuginfo (affected versions not specified) openSUSE systemtap-sdt-devel (affected versions not specified) openSUSE systemtap (affected versions not specified) openSUSE libvmtools0 (affected versions not specified) Linux kernel versions prior to 3.2.2 openSUSE systemtap-client (affected versions not specified) openSUSE systemtap-client-debuginfo (affected versions not specified) openSUSE systemtap-server-debuginfo (affected versions not specified) openSUSE libvmtools0-debuginfo (affected versions not specified) openSUSE systemtap-runtime (affected versions not specified) openSUSE systemtap-server (affected versions not specified) openSUSE systemtap-debuginfo (affected versions not specified) openSUSE libvmtools-devel (affected versions not specified) openSUSE systemtap-debugsource (affected versions not specified)

Description The issue involves multiple vulnerabilities in various packages of the openSUSE operating system, including systemtap and libvmtools, which can lead to a disruption of protected information availability. These vulnerabilities can be exploited remotely. Additionally, a vulnerability in the Linux kernel's NFSv4 implementation prior to version 3.2.2 allows remote NFS servers to cause a denial of service by sending an excessive number of bitmap words in GETACL replies.

Recommendations For openSUSE systemtap-runtime-debuginfo, update to a version that includes the fix for this issue. For openSUSE systemtap-sdt-devel, update to a version that includes the fix for this issue. For openSUSE systemtap, update to a version that includes the fix for this issue. For openSUSE libvmtools0, update to a version that includes the fix for this issue. For Linux kernel, update to version 3.2.2 or later. For openSUSE systemtap-client, update to a version that includes the fix for this issue. For openSUSE systemtap-client-debuginfo, update to a version that includes the fix for this issue. For openSUSE systemtap-server-debuginfo, update to a version that includes the fix for this issue. For openSUSE libvmtools0-debuginfo, update to a version that includes the fix for this issue. For openSUSE systemtap-runtime, update to a version that includes the fix for this issue. For openSUSE systemtap-server, update to a version that includes the fix for this issue. For openSUSE systemtap-debuginfo, update to a version that includes the fix for this issue. For openSUSE libvmtools-devel, update to a version that includes the fix for this issue. For openSUSE systemtap-debugsource, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the vulnerable packages until a patch is available.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-189

CWE-119

Related Identifiers

BDU:2015-05303

BDU:2015-05304

BDU:2015-05305

BDU:2015-05306

BDU:2015-05307

BDU:2015-05308

BDU:2015-05309

BDU:2015-05310

BDU:2015-05311

BDU:2015-05312

BDU:2015-05313

BDU:2015-05314

BDU:2015-05315

CESA-2012_0862

CVE-2011-4131

OPENSUSE-SU-2013_0925-1

RHSA-2012:0333

RHSA-2012:0862

RHSA-2012:1541

RHSA-2012_0862

SUSE-SU-2015:0481-1

USN-1457-1

USN-1470-1

USN-1471-1

USN-1472-1

USN-1476-1

USN-1530-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

Libvmtools-Devel

Libvmtools0

Libvmtools0-Debuginfo

Systemtap

Systemtap-Client

Systemtap-Client-Debuginfo

Systemtap-Debuginfo

Systemtap-Debugsource

Systemtap-Runtime

Systemtap-Runtime-Debuginfo

Systemtap-Sdt-Devel

Systemtap-Server

Systemtap-Server-Debuginfo

References · 46

• 🔥 https://github.com/realtalk/cve-2013-2094 · Exploit
• 🔥 https://github.com/hiikezoe/libperf_event_exploit · Exploit
• 🔥 https://github.com/Pashkela/CVE-2013-2094 · Exploit
• 🔥 https://github.com/timhsutw/cve-2013-2094 · Exploit
• https://bdu.fstec.ru/vul/2015-05312 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05310 · Security Note
• https://ubuntu.com/security/notices/USN-1471-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-4131 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081280.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1476-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05304 · Security Note
• https://bdu.fstec.ru/vul/2015-05306 · Security Note
• https://cve.org/CVERecord?id=CVE-2011-4131 · Security Note
• https://bdu.fstec.ru/vul/2015-05308 · Security Note