Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Systemtap | Systemtap | 1.1 (including) | 1.1 (including) |
| Red Hat Enterprise Linux 4 | RedHat | systemtap-0:0.6.2-2.el4_8.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | systemtap-0:0.9.7-5.el5_4.3 | * |
| Systemtap | Ubuntu | hardy | * |
| Systemtap | Ubuntu | intrepid | * |
| Systemtap | Ubuntu | jaunty | * |
| Systemtap | Ubuntu | karmic | * |
| Systemtap | Ubuntu | lucid | * |
| Systemtap | Ubuntu | maverick | * |
| Systemtap | Ubuntu | natty | * |
| Systemtap | Ubuntu | oneiric | * |
| Systemtap | Ubuntu | upstream | * |