Lucene search
+L

26 matches found

Mend
Mend
•added 2018/05/23 1:00 p.m.•17 views

CVE-2018-1124

procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code executi...

7.8CVSS0.01865EPSS
SaveExploits5References25
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/23 12:00 a.m.•4 views

CVE-2018-1124: Integer Overflow or Wraparound

procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code executi...

7.8CVSS8.5AI score0.01865EPSS
SaveExploits5References5
Oracle linux
Oracle linux
•added 2018/05/23 12:00 a.m.•82 views

procps-ng security update

3.3.10-17.el75.2 - check for truncation after calling snprintf - Related: CVE-2018-1124 3.3.10-17.el75.1 - fix integer overflows leading to heap overflow in file2strvec - Resolves: CVE-2018-1124...

9.8CVSS2.7AI score0.01865EPSS
SaveExploits6
osv_ubuntu
osv_ubuntu
•added 2018/05/17 5:00 p.m.•18 views

UBUNTU-CVE-2018-1124

procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code executi...

7.8CVSS7.3AI score0.01865EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
•added 2018/05/17 12:00 a.m.•3 views

PT-2018-2204

Name of the Vulnerable Software and Affected Versions procps-ng versions prior to 3.3.15 Description The issue is caused by an integer overflow in the file2strvec function of the procps-ng set of console applications for monitoring and terminating system processes. This can allow an attacker to...

9.8CVSS0.01865EPSS
SaveExploits7References101
Positive Technologies
Positive Technologies
•added 2018/05/17 12:00 a.m.•2 views

PT-2018-2216

Name of the Vulnerable Software and Affected Versions procps-ng versions prior to 3.3.15 Description The issue is related to an integer overflow in the file2strvec function of the procps-ng utility set, which can be exploited by a remote attacker to elevate privileges and execute arbitrary code...

9.8CVSS0.01865EPSS
SaveExploits7References99
Rows per page
Query Builder