389 matches found
Integer Overflow
procps-ng is vulnerable to integer overflows. A local attacker could cause integer truncation, leading to undersized regions being returned to callers that could then be overflowed...
EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1510)
According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environment strings, an attacker can caus...
openSUSE: Security Advisory for procps (openSUSE-SU-2019:0291-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : procps (openSUSE-2019-291)
This update for procps fixes the following security issues : - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the...
Security update for procps (important)
openSUSE Security Update: Security update for procps Announcement ID: openSUSE-SU-2019:0291-1 Rating: important References: 1092100 1121753 Cross-References: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Affected Products: openSUSE Leap 42.3 An update that fixes 5...
SUSE SLED12 / SLES12 Security Update : procps (SUSE-SU-2019:0450-1)
This update for procps fixes the following security issues : CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the...
Photon OS 1.0: Procps PHSA-2018-1.0-0175
An update of the procps package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0175. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid12187...
Photon OS 2.0: Procps PHSA-2018-2.0-0084
An update of the procps package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0084. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12198...
The vulnerability of the file2strvec function in the command-line utilities of procps-ng allows a attacker to escalate their privileges and execute arbitrary code.
The vulnerability of the file2strvec function in the procps-ng command-line utilities is related to integer overflow. Exploiting this vulnerability allows a remote attacker to escalate privileges and execute arbitrary code...
Arbitrary Code Execution
procps is vulnerable to arbitrary code execution attacks. The vulnerability exists as procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in...
Fedora 28 : procps-ng (2018-bba8fed5ab)
Fixes for : - CVE-2018-1124 - CVE-2018-1126 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
SUSE SLED12 / SLES12 Security Update : procps (SUSE-SU-2018:2451-2)
This update for procps fixes the following security issues : CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the...
EulerOS Virtualization 2.5.0 : procps-ng (EulerOS-SA-2018-1340)
According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory...
EulerOS Virtualization 2.5.1 : procps-ng (EulerOS-SA-2018-1326)
According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory...
Security Bulletin: Vulnerabilities in procps affect IBM BladeCenter Advanced Management Module (AMM)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in procps. Vulnerability Details CVEID: CVE-2018-1126 DESCRIPTION: procps-ng procps is vulnerable to a buffer overflow, caused by improper bounds checking. By sending a specially-crafted request, a...
EulerOS Virtualization 2.5.1 : procps-ng (EulerOS-SA-2018-1274)
According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - procps-ng, procps: Integer overflows leading to heap overflow in file2strvec.CVE-2018-1124 - procps-ng, procps: incorrect integ...
EulerOS Virtualization 2.5.1 : kernel (EulerOS-SA-2018-1280)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted...
Photon OS 2.0: Openssl / Procps-ng / Perl PHSA-2018-2.0-0084 (deprecated)
An update of 'procps-ng', 'openssl', 'perl' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0084. The text itself is...
USN-3658-3: procps-ng vulnerabilities
USN-3658-1 fixed a vulnerability in procps-ng. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that the procps-ng top utility incorrectly read its configuration file from the current working directory. A local attacker could possibl...
