Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Procps-ng Project records in CISA KEVNo Procps-ng Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 45
procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01675 · Published 2018-05-23 · Partial fix CWE-190
Priority MEDIUM 44
procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.08738 · Published 2018-05-23 · Will not fix CWE-122
Priority MEDIUM 42
procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01821 · Published 2018-05-23 · Will not fix CWE-121
Priority MEDIUM 40
procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01865 · Published 2018-05-23 · Partial fix CWE-122
Priority LOW 35
procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top.
CVSS 3.0HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.01249 · Published 2018-05-23 · Partial fix CWE-829
Open these records in search →