CVE-2010-0411

CVE-2010-0411 describes multiple integer signedness errors in SystemTap versions 1.0 and 1.1, specifically within the __get_argv and __get_compat_argv functions. These flaws allow a local attacker to trigger a denial of service, potentially leading to a script crash, or even a system crash or hang, by supplying a process with an excessive number of arguments, which causes a buffer overflow. Rated with a CVSS score of 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C), this vulnerability requires local access and low attack complexity to achieve a complete availability impact. While not listed in CISA's KEV catalog and lacking active exploitation, public exploit code exists (EDB-33604), though there is minimal community discussion or media coverage surrounding this decade-old issue.