CVE-2018-1125

If a process inspected by pgrep has an argument longer than INT_MAX bytes, “int bytes” could wrap around back to a large positive int (rather than approaching zero), leading to a stack buffer overflow via strncat().

Mitigation

The procps suite on Red Hat Enterprise Linux is built with FORTIFY, which limits the impact of this stack overflow (and others like it) to a crash.