RHEL 7 : Red Hat Virtualization (RHSA-2018:1820)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1820 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host,...

Amazon Linux 2 : procps-ng (ALAS-2018-1031)

Multiple integer overflows leading to heap corruption flaws were discovered in file2strvec. These vulnerabilities can lead to privilege escalation for a local attacker who can create entries in procfs by starting processes, which will lead to crashes or arbitrary code execution in proc utilities...

Important: Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update

An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for RHEL-7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...

Wifite 2.1.0 - Automated Wireless Attack Tool

A complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! What's new in Wifite2? Less bugs Cleaner process management. Does not leave processes running in the background the ol...

Important: procps-ng

Issue Overview: Multiple integer overflows leading to heap corruption flaws were discovered in file2strvec. These vulnerabilities can lead to privilege escalation for a local attacker who can create entries in procfs by starting processes, which will lead to crashes or arbitrary code execution in...

USN-3658-2: procps-ng vulnerabilities

USN-3658-1 fixed a vulnerability in procps-ng. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that libprocps incorrectly handled the file2strvec function. A local attacker could possibly use this to execute arbitrary code...

Scientific Linux Security Update : procps on SL6.x i386/x86_64 (20180531)

Security Fixes : - procps-ng, procps: Integer overflows leading to heap overflow in file2strvec CVE-2018-1124 - procps-ng, procps: incorrect integer size in proc/alloc. leading to truncation / integer overflow issues CVE-2018-1126 C Tenable Network Security, Inc. The descriptive text is C...

Procps-ng - Multiple Vulnerabilities

Exploit for linux platform in category local exploits Procps-ng Audit Report ======================================================================== Contents ======================================================================== Summary 1. FUSE-backed /proc/PID/cmdline 2. Unprivileged process...

CentOS Update for procps-ng CESA-2018:1700 centos7

Check the version of procps-ng SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882892";...

Procps-ng - Multiple Vulnerabilities

Procps-ng - Multiple Vulnerabilities Qualys Security Advisory Procps-ng Audit Report ======================================================================== Contents ======================================================================== Summary 1. FUSE-backed /proc/PID/cmdline 2. Unprivileged...

Procps-ng - Multiple Vulnerabilities

Qualys Security Advisory Procps-ng Audit Report ======================================================================== Contents ======================================================================== Summary 1. FUSE-backed /proc/PID/cmdline 2. Unprivileged process hiding 3. Local Privilege...

CentOS 7 : procps-ng (CESA-2018:1700)

An update for procps-ng is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

procps security update

CentOS Errata and Security Advisory CESA-2018:1700 An update for procps-ng is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

procps-ng integer overflow vulnerability

procps-ng is a utility program used on Linux platforms to provide information about proc filesystem processes. An integer overflow vulnerability exists in the 'file2strvec' function in procps-ng versions prior to 3.3.15. A local attacker can exploit this vulnerability to corrupt the heap and...

Fedora Update for procps-ng FEDORA-2018-de5de06754

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

procps-ng Arbitrary Code Execution Vulnerability

procps-ng is a utility program used on Linux platforms to provide information about proc filesystem processes. A security vulnerability exists in procps-ng versions prior to 3.3.15, which stems from incorrect integer values in proc/alloc.. An attacker can exploit the vulnerability by sending a...

procps-ng pgrep buffer overflow vulnerability

procps-ng is a utility used on Linux platforms to provide information about processes on the proc file system. pgrep is one of the command line tools used to find process IDs. A stack buffer overflow vulnerability exists in pgrep in versions of procps-ng prior to 3.3.15. A detailed vulnerability...

Fedora 27 : procps-ng (2018-de5de06754)

Fixes for : - CVE-2018-1124 - CVE-2018-1126 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

procps-ng elevation of privilege vulnerability

procps-ng is a utility used on Linux platforms to provide information about proc filesystem processes. An elevation of privilege vulnerability exists in the 'configfile' function of top in versions of procps-ng prior to 3.3.15. A local attacker can exploit this vulnerability to elevate privileges...

procps-ng denial of service vulnerability

procps-ng is a utility used on Linux platforms to provide information about proc filesystem processes. A security vulnerability exists in procps-ng versions prior to 3.3.15. An attacker can exploit this vulnerability to cause a transient denial of service buffer overflow and crash...