[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20100204180228.GD3931@redhat.com>
Date: Thu, 4 Feb 2010 11:02:28 -0700
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Subject: systemtap DoS issue (CVE-2010-0411)
Just a heads up that an issue in SystemTap was found where using the
__get_argv() function in tapset could result in a crash of the SystemTap
script that calls it (and syscall.execve) or, if it's running as root,
could lead to a hang/crash of the system running the script.
This flaw has been assigned CVE-2010-0411. More details can be found
here:
https://bugzilla.redhat.com/show_bug.cgi?id=559719
http://sourceware.org/bugzilla/show_bug.cgi?id=11234
--
Vincent Danen / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
