2 matches found
CVE-2018-1126
A flaw was found where procps-ng provides wrappers for standard C allocators that took unsigned int instead of sizet parameters. On platforms where these differ such as x8664, this could cause integer truncation, leading to undersized regions being returned to callers that could then be overflowe...
Integer Overflow
procps-ng is vulnerable to integer overflows. A local attacker could cause integer truncation, leading to undersized regions being returned to callers that could then be overflowed...