CVE-2023-4016

CVE-2023-4016 concerns the procps-ng package (ps utility) where, under some circumstances, a user with access could cause the process heap to accept unbounded data writes. The initial description and multiple connected advisories confirm the issue is a local-privilege context with memory handling...

CVE-2018-1121

CVE-2018-1121 affects procps, procps-ng up to version 3.3.15. The issue is a race in reading /proc/PID entries where a high-PID process can observe enumeration with inotify and fork/exec to obtain a lower PID, enabling an unprivileged attacker to hide a process from procps-ng utilities. Connected...