CVE-2010-0411: Buffer Overflow
Escalated to Bugzilla from IssueTracker
Other sources
Multiple integer signedness errors in the (1) getargv and (2) getcompatargv functions in tapset/auxsyscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2010-0411?
CVE-2010-0411 has a severity rating that allows local users to cause denial of service through a buffer overflow.
How do I fix CVE-2010-0411?
To fix CVE-2010-0411, upgrade SystemTap to version 0:0.6.2-2.el4_8.1 or 0:0.9.7-5.el5_4.3.
What types of systems are affected by CVE-2010-0411?
CVE-2010-0411 affects local systems running SystemTap version 1.1 and specific Red Hat package versions.
What kind of vulnerabilities does CVE-2010-0411 exploit?
CVE-2010-0411 exploits integer signedness errors in the __get_argv and __get_compat_argv functions.
What are the potential consequences of CVE-2010-0411?
The potential consequences of CVE-2010-0411 include system crashes, hangs, or crashes in scripts processing a large number of arguments.