SystemTap DWARF Expression Handling Two Divide-By-Zero Denial of Service Vulnerabilities

Bugtraq ID:	47934
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-1769 CVE-2011-1781
Remote:	Yes
Local:	Yes
Published:	May 20 2011 12:00AM
Updated:	May 07 2015 05:03PM
Credit:	Mark Wielaard
Vulnerable:	SystemTap SystemTap 1.2.2 SystemTap SystemTap 1.4 SystemTap SystemTap 1.3 SystemTap SystemTap 1.1 SystemTap SystemTap 1.0 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1
Not Vulnerable:

SystemTap DWARF Expression Handling Two Divide-By-Zero Denial of Service Vulnerabilities

SystemTap is prone to two denial-of-service vulnerabilities because of divide-by-zero exceptions.

Successfully exploiting these issues causes a kernel panic, resulting in denial-of-service conditions.

SystemTap DWARF Expression Handling Two Divide-By-Zero Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2010.1

• Mandriva systemtap-1.2-1.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2011 x86_64

• Mandriva systemtap-1.4-1.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2011

• Mandriva systemtap-1.4-1.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva systemtap-1.2-1.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/