1.9

CVE-2009-2911

Exploit
SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Systemtap ≫ Systemtap Version1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.361
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=41633
http://secunia.com/advisories/37167
http://sources.redhat.com/bugzilla/show_bug.cgi?id=10750
Exploit
http://www.openwall.com/lists/oss-security/2009/10/21/1
Patch
http://www.securityfocus.com/bid/36778
http://www.vupen.com/english/advisories/2009/2989
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=529175
https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00627.html
https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00793.html