CVE-2011-1781

Related Files

Mandriva Linux Security Advisory 2011-155

Posted Oct 17, 2011

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-155 - SystemTap 1.4 and earlier, when unprivileged mode is enabled, allows local users to cause a denial of service via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access. SystemTap 1.4, when unprivileged mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding. The updated packages have been patched to correct these issues.

tags | advisory, denial of service, local

systems | linux, mandriva

advisories | CVE-2011-1769, CVE-2011-1781

SHA-256 | 80054053ed9969577a37013c9fcadfd16d38cc9f72acdfa8f210d01aa5e47396

Download | Favorite | View

Red Hat Security Advisory 2011-0842-01

Posted Jun 1, 2011

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2011-0842-01 - SystemTap is an instrumentation system for systems running the Linux kernel, version 2.6. Developers can write scripts to collect data on the operation of the system. Two divide-by-zero flaws were found in the way SystemTap handled malformed debugging information in DWARF format. When SystemTap unprivileged mode was enabled, an unprivileged user in the stapusr group could use these flaws to crash the system. Additionally, a privileged user could trigger these flaws when tricked into instrumenting a specially-crafted ELF binary, even when unprivileged mode was not enabled. Various other issues were also addressed.

tags | advisory, kernel

systems | linux, redhat

advisories | CVE-2011-1769, CVE-2011-1781

SHA-256 | 3c7427b5b95d584ff0f15f1cf948ace22383d21c18c9c82f90c5dc9830434834

Download | Favorite | View