CVE-2011-1781 Denial of service in n/a

What is CVE-2011-1781?

CVE-2011-1781 is a low-severity denial of service vulnerability in n/a, published on 29 Aug 2011. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding (aka backtracing).

Weakness: CWE-189

Which versions are affected by CVE-2011-1781?

It affects 1 product.

Products include Systemtap Systemtap.

How do I fix CVE-2011-1781?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2011-1781 being exploited?

There is no known exploitation of CVE-2011-1781 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2009-4273 Command injection in n/a Critical 10.0
• CVE-2010-0412 Command injection in n/a High 7.5
• CVE-2010-4170 Privilege escalation in n/a High 7.2
• CVE-2012-0875 Information disclosure in n/a Medium 5.4
• CVE-2010-0411 Integer overflow in n/a Medium 4.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2011-1781, GHSA-qrqj-c695-3j7q.