Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.9
CVE-2010-0411: SystemTap 1.1 Crashes from Large Process Arguments
CVE-2010-0411 · published 16 years ago
Summary
SystemTap 1.1 is affected by a denial of service issue. Local users can cause a script or system crash by sending a process with many arguments. To prevent this, update to a fixed version of SystemTap or restrict the number of arguments in your processes.
What to do
- Update debian systemtap to version 1.2-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | systemtap |
< 1.2-1 Fix: upgrade to 1.2-1
|
| Debian:12 | debian | systemtap |
< 1.2-1 Fix: upgrade to 1.2-1
|
| Debian:13 | debian | systemtap |
< 1.2-1 Fix: upgrade to 1.2-1
|
| Debian:14 | debian | systemtap |
< 1.2-1 Fix: upgrade to 1.2-1
|
| – | systemtap | systemtap |
1.1 cpe:2.3:a:systemtap:systemtap:1.1:*:*:*:*:*:*:* |
Original advisory text
Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash...
Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.
References
- https://security-tracker.debian.org/tracker/CVE-2010-0411 Vendor Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.h...
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.h...
- http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html
- http://marc.info/?l=oss-security&m=126530657715364&w=2
- http://secunia.com/advisories/38426 Vendor Advisory
- http://secunia.com/advisories/38680
- http://secunia.com/advisories/38765
- http://secunia.com/advisories/38817
- http://secunia.com/advisories/39656
- http://securitytracker.com/id?1023664
- http://sourceware.org/bugzilla/show_bug.cgi?id=11234
- http://sourceware.org/git/gitweb.cgi?p=systemtap.git%3Ba=commit%3Bh=a2d399c87a64...
- http://www.redhat.com/support/errata/RHSA-2010-0124.html
- http://www.redhat.com/support/errata/RHSA-2010-0125.html
- http://www.securityfocus.com/bid/38120 Exploit
- http://www.vupen.com/english/advisories/2010/1001
- https://bugzilla.redhat.com/show_bug.cgi?id=559719
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Severity
4.9
Medium
Type
CWE-189Numeric Errors
Timeline
Published8 Feb 2010
Updated3 Nov 2026
First seen15 Aug 2026
Track software like this
Free during beta