PT-2023-6403 · Procps Ng+11 · Procps-Ng+11

Published 2023-08-02 · Updated 2025-04-08 · CVE-2023-4016

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions procps-ng versions (affected versions not specified)

Description The issue is related to a buffer overflow in the procps-ng utility, specifically in the "ps" utility, which allows a user to write almost unlimited amounts of unfiltered data into the process heap under certain circumstances. This can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

ALSA-2023:6705

ALSA-2023:7187

ALT-PU-2023-6222

ALT-PU-2023-8011

ALT-PU-2023-8135

BDU:2023-07117

CESA-2023_7187

CVE-2023-4016

ECHO-38B0-90F2-01F8

OESA-2023-1514

OPENSUSE-SU-2023_3472-1

OPENSUSE-SU-2024:13140-1

OPENSUSE-SU-2024:13141-1

OPENSUSE-SU-2025_0741-1

RHSA-2023:6705

RHSA-2023:7187

RHSA-2023_6705

RHSA-2023_7187

RLSA-2023:7187

ROSA-SA-2025-2596

SUSE-SU-2023:3471-1

SUSE-SU-2023:3472-1

SUSE-SU-2023_3471-1

SUSE-SU-2023_3472-1

SUSE-SU-2025:0725-1

SUSE-SU-2025:0741-1

SUSE-SU-2025:20180-1

SUSE-SU-2025_0725-1

SUSE-SU-2025_0741-1

USN-6477-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Procps-Ng

References · 60

• https://bdu.fstec.ru/vul/2023-07117 · Security Note
• https://linux.oracle.com/errata/ELSA-2023-7187.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6477-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-7187.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-4016 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2023-4016 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3471-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4016 · Security Note
• https://ubuntu.com/security/CVE-2023-4016 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1514 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3472-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-4016 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:7187 · Vendor Advisory