26 matches found
CVE-2018-1124
procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code executi...
CVE-2018-1124: Integer Overflow or Wraparound
procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code executi...
procps-ng security update
3.3.10-17.el75.2 - check for truncation after calling snprintf - Related: CVE-2018-1124 3.3.10-17.el75.1 - fix integer overflows leading to heap overflow in file2strvec - Resolves: CVE-2018-1124...
UBUNTU-CVE-2018-1124
procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code executi...
PT-2018-2204
Name of the Vulnerable Software and Affected Versions procps-ng versions prior to 3.3.15 Description The issue is caused by an integer overflow in the file2strvec function of the procps-ng set of console applications for monitoring and terminating system processes. This can allow an attacker to...
PT-2018-2216
Name of the Vulnerable Software and Affected Versions procps-ng versions prior to 3.3.15 Description The issue is related to an integer overflow in the file2strvec function of the procps-ng utility set, which can be exploited by a remote attacker to elevate privileges and execute arbitrary code...