Lucene search

K
redosRedosROS-20231020-03
HistoryOct 20, 2023 - 12:00 a.m.

ROS-20231020-03

2023-10-2000:00:00
redos.red-soft.ru
9
ps utility
vulnerability
out-of-field writes
remote attacker
unfiltered data
process heap
unix

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

The ps utility vulnerability is related to out-of-field writes. Exploitation of the vulnerability could allow
an attacker acting remotely to write unlimited amounts of unfiltered data to the heap of the
process

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64procps-ng<= 3.3.17-1UNKNOWN

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%