systemtap: Crash with systemtap script using __get_argv()

🗓️ 01 Mar 2010 19:02:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 6 Views

SystemTap 1.1 suffers signedness errors in get argv and get compat argv causing denial of service from long argument lists.

Reporter	Title	Published	Views	Family All 65
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	5	i386	systemtap	0:0.9.7-5.el5_4.3	systemtap-0:0.9.7-5.el5_4.3.i386.rpm
Red Hat Enterprise Linux	5	ia64	systemtap	0:0.9.7-5.el5_4.3	systemtap-0:0.9.7-5.el5_4.3.ia64.rpm
Red Hat Enterprise Linux	5	ppc64	systemtap	0:0.9.7-5.el5_4.3	systemtap-0:0.9.7-5.el5_4.3.ppc64.rpm
Red Hat Enterprise Linux	5	s390x	systemtap	0:0.9.7-5.el5_4.3	systemtap-0:0.9.7-5.el5_4.3.s390x.rpm
Red Hat Enterprise Linux	5	x86_64	systemtap	0:0.9.7-5.el5_4.3	systemtap-0:0.9.7-5.el5_4.3.x86_64.rpm
Red Hat Enterprise Linux	5	i386	systemtap-client	0:0.9.7-5.el5_4.3	systemtap-client-0:0.9.7-5.el5_4.3.i386.rpm
Red Hat Enterprise Linux	5	ia64	systemtap-client	0:0.9.7-5.el5_4.3	systemtap-client-0:0.9.7-5.el5_4.3.ia64.rpm
Red Hat Enterprise Linux	5	ppc64	systemtap-client	0:0.9.7-5.el5_4.3	systemtap-client-0:0.9.7-5.el5_4.3.ppc64.rpm
Red Hat Enterprise Linux	5	s390x	systemtap-client	0:0.9.7-5.el5_4.3	systemtap-client-0:0.9.7-5.el5_4.3.s390x.rpm
Red Hat Enterprise Linux	5	x86_64	systemtap-client	0:0.9.7-5.el5_4.3	systemtap-client-0:0.9.7-5.el5_4.3.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2010-0411
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-0411
cve	www.cve.org/CVERecord

25 Jun 2026 10:36Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.9

EPSS0.00955

systemtap get argv get compat argv signedness error denial of service buffer overflow