Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2018-1124

procps: Integer overflows leading to heap overflow in file2strvec

procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Opensuse and 3 more
Products
Ubuntu Linux Debian Linux Leap and 10 more
CVE-2018-1125

procps: stack buffer overflow in pgrep

procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Opensuse and 1 more
Products
Ubuntu Linux Debian Linux Leap and 1 more
CVE-2018-1123

procps: denial of service in ps via mmap buffer overflow

procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).

CVSS 3.0 · 3.9 Low EPSS 8.7% KEV · Not listed
Vendors
Canonical Debian Procps-ng Project
Products
Ubuntu Linux Debian Linux Procps-ng
CVE-2018-1126

procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.

CVSS 3.0 · 4.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Procps-ng Project and 2 more
Products
Ubuntu Linux Debian Linux Procps-ng and 10 more
CVE-2018-1122

procps: Local privilege escalation in top

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the config_file() function.

CVSS 3.0 · 7.3 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Procps-ng Project and 1 more
Products
Ubuntu Linux Debian Linux Procps-ng and 6 more