An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instruments -- that process (via dtrace -p , pid probes, or USDT), the ELF parser reads heap…
Oracle Corporation Oracle Linux Schwachstellen (CVE)
Für Oracle Corporation Oracle Linux veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
4.4Mittel
Oracle Corporation Oracle Linux
3.3Niedrig
Oracle Corporation Oracle Linux
An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()
5.5Mittel
Oracle Corporation Oracle Linux
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.