Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. (dot dot) in the --save argument, related to the --session-dir argument, a different vulnerability than CVE-2011-1760.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade app-office/gnucash.Upgrade media-sound/lastfmplayer.Upgrade games-sports/racer-bin.Upgrade app-misc/ca-certificates.Upgrade sys-cluster/resource-agents.Upgrade net-libs/webkit-gtk.Upgrade app-admin/syslog-ng.Upgrade media-libs/xine-lib.Upgrade dev-util/oprofile.Upgrade net-analyzer/sflowtool.Upgrade dev-vcs/gitolite.Upgrade dev-util/qt-creator.Upgrade x11-apps/xrdb.Upgrade dev-php/PEAR-Mail.Upgrade net-misc/mrouted.Upgrade net-misc/vino.Upgrade dev-php/PEAR-PEAR.Upgrade sys-fs/lvm2.Upgrade net-libs/libsoup.Upgrade gnome-base/gdm.Upgrade dev-libs/xmlsec.Upgrade media-libs/fmod.Upgrade sys-apps/shadow.Upgrade dev-db/unixODBC.Upgrade net-misc/rsync. | Oct 30, 2017 | Jun 9, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 26, 2011 |
| Ubuntu | — | Upgrade oprofile | Nov 8, 2024 | Jun 9, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub