PT-2018-2204 · Procps Ng+5 · Procps-Ng+5
Published
2018-05-17
·
Updated
2024-06-15
·
CVE-2018-1124
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
procps-ng versions prior to 3.3.15
Description
The issue is caused by an integer overflow in the
file2strvec function of the procps-ng set of console applications for monitoring and terminating system processes. This can allow an attacker to execute arbitrary code, potentially leading to privilege escalation for a local attacker who can create entries in procfs by starting processes. The exploitation could result in crashes or arbitrary code execution in proc utilities run by other users.Recommendations
For procps-ng versions prior to 3.3.15, update to version 3.3.15 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
file2strvec function until a patch is available.Exploit
Fix
Integer Overflow
Memory Corruption
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Red Hat
Suse
Ubuntu
Procps-Ng