An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instruments -- that process (via dtrace -p , pid probes, or USDT), the ELF parser reads heap…
Vulnerabilidades de Oracle Corporation Oracle Linux (CVE)
Registros CVE publicados para Oracle Corporation Oracle Linux, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
4.4Media
Oracle Corporation Oracle Linux
3.3Baja
Oracle Corporation Oracle Linux
An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()
5.5Media
Oracle Corporation Oracle Linux
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.