[<prev] [next>] [day] [month] [year] [list]
Date: Thu, 4 Feb 2010 11:02:28 -0700
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Subject: systemtap DoS issue (CVE-2010-0411)
Just a heads up that an issue in SystemTap was found where using the
__get_argv() function in tapset could result in a crash of the SystemTap
script that calls it (and syscall.execve) or, if it's running as root,
could lead to a hang/crash of the system running the script.
This flaw has been assigned CVE-2010-0411. More details can be found
here:
https://bugzilla.redhat.com/show_bug.cgi?id=559719
http://sourceware.org/bugzilla/show_bug.cgi?id=11234
--
Vincent Danen / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Powered by Openwall GNU/*/Linux -
Powered by OpenVZ
