CVE-2018-1123
Low
Description
procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).
SeverityLow
CVSS3.9
Exploit probability—
Product
Procps-ng
PublishedMay 23, 2018
First seenMay 23, 2018
Weakness typeCWE-122CWE-122
How to fix
Update
- procps-ng_project procps-ng3.3.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| procps-ng_project procps-ng | v < 3.3.15 | 3.3.15 |
| canonical ubuntu_linux | 12.04, 14.04, 16.04, 17.10, 18.04 | — |
| debian debian_linux | 7.0, 8.0, 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.