Lucene search

K
redhatRedHatRHSA-2018:2268
HistoryJul 26, 2018 - 12:46 p.m.

(RHSA-2018:2268) Important: procps security update

2018-07-2612:46:19
access.redhat.com
25

0.005 Low

EPSS

Percentile

77.3%

The procps packages contain a set of system utilities that provide system information. The procps packages include the following utilities: ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, pwdx, sysctl, pmap, and slabtop.

Security Fix(es):

  • procps-ng, procps: Integer overflows leading to heap overflow in file2strvec (CVE-2018-1124)

  • procps-ng, procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues (CVE-2018-1126)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Qualys Research Labs for reporting these issues.