procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues

A flaw was found where procps-ng provides wrappers for standard C allocators that took unsigned int instead of sizet parameters. On platforms where these differ such as x8664, this could cause integer truncation, leading to undersized regions being returned to callers that could then be overflowe...

DLA-1390-1 procps - security update

Bulletin has no description...

procps security update

3.2.8-45.0.1.el69.3 - vmstat: fix invalid CPU utilization stats after vCPU hot-plug/unplug Konrad Rzeszutek Wilk bug 18011019 3.2.8-45.el69.3 - drop leftover assignment in fix for CVE-2018-1124 causing a severe regression - Resolves: CVE-2018-1124 3.2.8-45.el69.2 - fix integer overflows leading t...

GLSA-201805-14 : procps: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201805-14 procps: Multiple vulnerabilities Multiple vulnerabilities have been discovered in procps. Please review the CVE identifiers referenced below for details. Impact : A local attacker could execute arbitrary code, escalate...

procps: Multiple vulnerabilities

Background A bunch of small useful utilities that give information about processes using the /proc filesystem. Description Multiple vulnerabilities have been discovered in procps. Please review the CVE identifiers referenced below for details. Impact A local attacker could execute arbitrary code,...

Procps-ng - Multiple Vulnerabilities

Exploit for linux platform in category local exploits Procps-ng Audit Report ======================================================================== Contents ======================================================================== Summary 1. FUSE-backed /proc/PID/cmdline 2. Unprivileged process...

Procps-ng - Multiple Vulnerabilities

Procps-ng - Multiple Vulnerabilities Qualys Security Advisory Procps-ng Audit Report ======================================================================== Contents ======================================================================== Summary 1. FUSE-backed /proc/PID/cmdline 2. Unprivileged...

CentOS 7 : procps-ng (CESA-2018:1700)

An update for procps-ng is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CentOS Update for procps-ng CESA-2018:1700 centos7

Check the version of procps-ng SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882892";...

Procps-ng - Multiple Vulnerabilities

Qualys Security Advisory Procps-ng Audit Report ======================================================================== Contents ======================================================================== Summary 1. FUSE-backed /proc/PID/cmdline 2. Unprivileged process hiding 3. Local Privilege...

procps security update

CentOS Errata and Security Advisory CESA-2018:1700 An update for procps-ng is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

procps-ng Arbitrary Code Execution Vulnerability

procps-ng is a utility program used on Linux platforms to provide information about proc filesystem processes. A security vulnerability exists in procps-ng versions prior to 3.3.15, which stems from incorrect integer values in proc/alloc.. An attacker can exploit the vulnerability by sending a...

procps-ng elevation of privilege vulnerability

procps-ng is a utility used on Linux platforms to provide information about proc filesystem processes. An elevation of privilege vulnerability exists in the 'configfile' function of top in versions of procps-ng prior to 3.3.15. A local attacker can exploit this vulnerability to elevate privileges...

procps-ng integer overflow vulnerability

procps-ng is a utility program used on Linux platforms to provide information about proc filesystem processes. An integer overflow vulnerability exists in the 'file2strvec' function in procps-ng versions prior to 3.3.15. A local attacker can exploit this vulnerability to corrupt the heap and...

procps-ng denial of service vulnerability

procps-ng is a utility used on Linux platforms to provide information about proc filesystem processes. A security vulnerability exists in procps-ng versions prior to 3.3.15. An attacker can exploit this vulnerability to cause a transient denial of service buffer overflow and crash...

procps-ng pgrep buffer overflow vulnerability

procps-ng is a utility used on Linux platforms to provide information about processes on the proc file system. pgrep is one of the command line tools used to find process IDs. A stack buffer overflow vulnerability exists in pgrep in versions of procps-ng prior to 3.3.15. A detailed vulnerability...

Fedora Update for procps-ng FEDORA-2018-de5de06754

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : procps-ng (2018-de5de06754)

Fixes for : - CVE-2018-1124 - CVE-2018-1126 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 27 Update: procps-ng-3.3.10-16.fc27

The procps package contains a set of system utilities that provide system information. Procps includes ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch and pwdx. The ps command displays a snapshot of running processes. The top command provides a repetitive update of the...

RHEL 7 : procps-ng (RHSA-2018:1700)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1700 advisory. - procps-ng, procps: Integer overflows leading to heap overflow in file2strvec CVE-2018-1124 - procps-ng, procps: incorrect integer size in...