CVE

Id
42995  
CVE No.
CVE-2010-0411  
Status
Candidate  
Description
Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
468636 42995 CVE-2010-0411 MLIST:[oss-security] 20100204 systemtap DoS issue (CVE-2010-0411)  View
468637 42995 CVE-2010-0411 URL:http://marc.info/?l=oss-security&m=126530657715364&w=2  View
468638 42995 CVE-2010-0411 CONFIRM:http://sourceware.org/bugzilla/show_bug.cgi?id=11234  View
468639 42995 CVE-2010-0411 CONFIRM:http://sourceware.org/git/gitweb.cgi?p=systemtap.git;a=commit;h=a2d399c87a642190f08ede63dc6fc434a5a8363a  View
468640 42995 CVE-2010-0411 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=559719  View
468641 42995 CVE-2010-0411 FEDORA:FEDORA-2010-1373  View
468642 42995 CVE-2010-0411 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html  View
468643 42995 CVE-2010-0411 FEDORA:FEDORA-2010-1720  View
468644 42995 CVE-2010-0411 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html  View
468645 42995 CVE-2010-0411 REDHAT:RHSA-2010:0124  View
468646 42995 CVE-2010-0411 URL:http://www.redhat.com/support/errata/RHSA-2010-0124.html  View
468647 42995 CVE-2010-0411 REDHAT:RHSA-2010:0125  View
468648 42995 CVE-2010-0411 URL:http://www.redhat.com/support/errata/RHSA-2010-0125.html  View
468649 42995 CVE-2010-0411 SUSE:SUSE-SR:2010:010  View
468650 42995 CVE-2010-0411 URL:http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html  View
468651 42995 CVE-2010-0411 BID:38120  View
468652 42995 CVE-2010-0411 URL:http://www.securityfocus.com/bid/38120  View
468653 42995 CVE-2010-0411 OVAL:oval:org.mitre.oval:def:9675  View
468654 42995 CVE-2010-0411 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9675  View
468655 42995 CVE-2010-0411 SECTRACK:1023664  View
468656 42995 CVE-2010-0411 URL:http://securitytracker.com/id?1023664  View
468657 42995 CVE-2010-0411 SECUNIA:38426  View
468658 42995 CVE-2010-0411 URL:http://secunia.com/advisories/38426  View
468659 42995 CVE-2010-0411 SECUNIA:38680  View
468660 42995 CVE-2010-0411 URL:http://secunia.com/advisories/38680  View
468661 42995 CVE-2010-0411 SECUNIA:38765  View
468662 42995 CVE-2010-0411 URL:http://secunia.com/advisories/38765  View
468663 42995 CVE-2010-0411 SECUNIA:38817  View
468664 42995 CVE-2010-0411 URL:http://secunia.com/advisories/38817  View
468665 42995 CVE-2010-0411 SECUNIA:39656  View
468666 42995 CVE-2010-0411 URL:http://secunia.com/advisories/39656  View
468667 42995 CVE-2010-0411 VUPEN:ADV-2010-1001  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35419 JVNDB-2010-001199 Linux Kernel の do_pages_move 関数におけるカーネルメモリの情報が漏えいする脆弱性 Linux Kernel の mm/migrate.c における do_pages_move 関数には、ノード値の確認処理に不備があるため、カーネルメモリの情報が漏えいする脆弱性が存在します。 CVE-2010-0415 42995 4.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001199.html  View