Oval Definition:
oval:org.mitre.oval:def:23511
Revision Date
:
2014-05-26
Version
:
21
Title
:
ELSA-2010:0894: systemtap security update (Important)
Description
:
The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).
Family
:
unix
Class
:
patch
Status
:
ACCEPTED
Reference(s)
:
CVE-2010-4170
CVE-2010-4171
ELSA-2010:0894-01
Platform(s)
:
Oracle Linux 5
Oracle Linux 6
Product(s)
:
systemtap
Definition Synopsis
rpm test
Oracle Linux 5.x
AND
rpm test
systemtap-client is earlier than 0:1.1-3.el5_5.3
OR
systemtap-runtime is earlier than 0:1.1-3.el5_5.3
OR
systemtap-testsuite is earlier than 0:1.1-3.el5_5.3
OR
systemtap-sdt-devel is earlier than 0:1.1-3.el5_5.3
OR
systemtap is earlier than 0:1.1-3.el5_5.3
OR
systemtap-initscript is earlier than 0:1.1-3.el5_5.3
OR
systemtap-server is earlier than 0:1.1-3.el5_5.3
OR
rpm test
Oracle Linux 6.x
AND
rpm test
systemtap-runtime is earlier than 0:1.2-11.el6_0
OR
systemtap-client is earlier than 0:1.2-11.el6_0
OR
systemtap-testsuite is earlier than 0:1.2-11.el6_0
OR
systemtap-sdt-devel is earlier than 0:1.2-11.el6_0
OR
systemtap is earlier than 0:1.2-11.el6_0
OR
systemtap-grapher is earlier than 0:1.2-11.el6_0
OR
systemtap-initscript is earlier than 0:1.2-11.el6_0
OR
systemtap-server is earlier than 0:1.2-11.el6_0
BACK