Debian Bug report logs -
#899170
procps: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126
Package:
src:procps;
Maintainer for src:procps is Craig Small <csmall@debianorg>;
Reported by: Salvatore Bonaccorso <carnil@debianorg>
Date: Sun, 20 May 2018 09:30:01 UTC
Severity: important
Tags: security ...
The Qualys Research Labs discovered multiple vulnerabilities in procps,
a set of command line and full screen utilities for browsing procfs The
Common Vulnerabilities and Exposures project identifies the following
problems:
CVE-2018-1122
top read its configuration from the current working directory if no
$HOME was configured If top were ...
Several security issues were fixed in procps-ng ...
Several security issues were fixed in procps-ng ...
Synopsis
Important: Red Hat Virtualization security, bug fix, and enhancement update
Type/Severity
Security Advisory: Important
Topic
An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for RHEL-7Red Hat Product Security h ...
Synopsis
Important: procps-ng security update
Type/Severity
Security Advisory: Important
Topic
An update for procps-ng is now available for Red Hat Enterprise Linux 73 Advanced Update Support, Red Hat Enterprise Linux 73 Telco Extended Update Support, and Red Hat Enterprise Linux 73 Update Services for S ...
Synopsis
Important: procps security update
Type/Severity
Security Advisory: Important
Topic
An update for procps is now available for Red Hat Enterprise Linux 66 Advanced Update Support and Red Hat Enterprise Linux 66 Telco Extended Update SupportRed Hat Product Security has rated this update as having a ...
Synopsis
Important: procps-ng security update
Type/Severity
Security Advisory: Important
Topic
An update for procps-ng is now available for Red Hat Enterprise Linux 74 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Sco ...
Synopsis
Important: procps security update
Type/Severity
Security Advisory: Important
Topic
An update for procps is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, w ...
Synopsis
Important: procps security update
Type/Severity
Security Advisory: Important
Topic
An update for procps is now available for Red Hat Enterprise Linux 67 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...
Synopsis
Important: procps-ng security update
Type/Severity
Security Advisory: Important
Topic
An update for procps-ng is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base sc ...
Multiple integer overflows leading to heap corruption flaws were discovered in file2strvec() These vulnerabilities can lead to privilege escalation for a local attacker who can create entries in procfs by starting processes, which will lead to crashes or arbitrary code execution in proc utilities run by other users (eg pgrep, pkill, pidof, w)(CVE ...
Multiple integer overflows leading to heap corruption flaws were discovered in file2strvec() These vulnerabilities can lead to privilege escalation for a local attacker who can create entries in procfs by starting processes, which will lead to crashes or arbitrary code execution in proc utilities run by other users (eg pgrep, pkill, pidof, w) ...
A security issue has been found in procps-ng <= 3314 An attacker can exploit an integer overflow in libprocps's file2strvec() function and carry out an LPE when another user, administrator, or script executes a vulnerable utility (pgrep, pidof, pkill, and w are vulnerable by default; other utilities are vulnerable if executed with non-default ...
Vulmon