utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-libs/libsoup.Upgrade dev-php/PEAR-PEAR.Upgrade dev-php/PEAR-Mail.Upgrade dev-db/unixODBC.Upgrade media-sound/lastfmplayer.Upgrade dev-libs/xmlsec.Upgrade sys-apps/shadow.Upgrade app-admin/syslog-ng.Upgrade media-libs/fmod.Upgrade x11-apps/xrdb.Upgrade net-misc/vino.Upgrade games-sports/racer-bin.Upgrade net-misc/mrouted.Upgrade gnome-base/gdm.Upgrade sys-fs/lvm2.Upgrade dev-util/qt-creator.Upgrade app-office/gnucash.Upgrade app-misc/ca-certificates.Upgrade media-libs/xine-lib.Upgrade dev-util/oprofile.Upgrade dev-vcs/gitolite.Upgrade net-analyzer/sflowtool.Upgrade sys-cluster/resource-agents.Upgrade net-libs/webkit-gtk.Upgrade net-misc/rsync. | Oct 30, 2017 | Jun 9, 2011 |
| Huawei Euleros 2_0_sp2 | — | Upgrade oprofile-guiUpgrade oprofileUpgrade oprofile-jit | Dec 4, 2019 | Jun 9, 2011 |
| Huawei Euleros 2_0_sp3 | — | Upgrade oprofileUpgrade oprofile-jitUpgrade oprofile-gui | Dec 18, 2019 | Jun 9, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 26, 2011 |
| Ubuntu | — | Upgrade oprofile | Nov 8, 2024 | Jun 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub