CVE-2023-4016

2023-08-0204:20:20

CWE-122

trellix

www.cve.org

weakness

data write

process heap

ps" utility

cve-2023-4016

CVSS3

2.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

AI Score

4.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Linux Kernal ",
    "vendor": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "3.3.0 (might be earlier) - latest"
      }
    ]
  }
]