An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instruments -- that process (via dtrace -p , pid probes, or USDT), the ELF parser reads heap…
Oracle Corporation Oracle Linux güvenlik açıkları (CVE)
Oracle Corporation Oracle Linux için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.
4.4Orta
Oracle Corporation Oracle Linux
3.3Düşük
Oracle Corporation Oracle Linux
An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuild_file_symtab()
5.5Orta
Oracle Corporation Oracle Linux
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.