CVE-2018-1124

🗓️ 18 May 2018 05:21:11Reported by redhat.comType

Multiple integer overflows in file2strvec() leading to heap corruption flaws can lead to privilege escalation and arbitrary code execution in proc utilities run by other users

Reporter	Title	Published	Views	Family All 163
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in procps	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Ubuntu affect IBM API Connect Developer Portal	23 Jun 201802:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in procps affect IBM BladeCenter Advanced Management Module (AMM)	11 Oct 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in procps-ng affect PowerKVM	7 Jul 201800:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by procps-ng procps vulnerabilities	25 Jul 201814:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Using Components with Known Vulnerabilities (procps) vulnerability	19 Dec 201820:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in procps	7 Dec 202322:45	–	ibm
0day.today	Procps-ng - Multiple Vulnerabilities	30 May 201800:00	–	zdt
Tenable Nessus	Amazon Linux 2 : procps-ng (ALAS-2018-1031)	12 Jun 201800:00	–	nessus
Tenable Nessus	CentOS 7 : procps-ng (CESA-2018:1700)	30 May 201800:00	–	nessus

Source	Link
qualys	www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txt
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

07 Mar 2023 22:02Current

4.6Medium risk

Vulners AI Score4.6

CVSS 24.6

CVSS 3.17.8

CVSS 37.3

EPSS0.00462