VULNERABILITY INTELLIGENCE
CVE-2010-0411
CVSS score4.9 MEDIUM
EPSS probability0.95%
CISA KEVNot currently listed
Published2010-02-08
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C
Description
Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.