Vulnerabilities

TI-2018-01042 CVE-2018-1125 · GHSA-jpw5-97m6-c8m2

Stack-based buffer overflow in [UNKNOWN] procps-ng, procps

MEDIUM 42

procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01821 Published 2018-05-23 Will not fix CWE-121

TI-2018-01040 CVE-2018-1123 · GHSA-3vgv-cg7r-qgvj

MEDIUM 44

procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.08738 Published 2018-05-23 Will not fix CWE-122

TI-2018-01039 CVE-2018-1122 · GHSA-mphr-mvhq-p32f

LOW 35

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.01249 Published 2018-05-23 Partial fix CWE-829

TI-2018-01043 CVE-2018-1126 · GHSA-3vhp-j7w2-qxhv

MEDIUM 45

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01675 Published 2018-05-23 Partial fix CWE-190

TI-2018-01041 CVE-2018-1124 · GHSA-6m7w-m36x-76pq

MEDIUM 40

procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01865 Published 2018-05-23 Partial fix CWE-122