Integer Size Vulnerability in procps-ng Affecting Multiple Linux Distributions
CVE-2018-1126

4.8MEDIUM

Key Information:

Vendor: [unknown]
Status: Procps-ng, Procps
Vendor: CVE Published:; 23 May 2018

What is CVE-2018-1126?

A flaw exists in the procps-ng software prior to version 3.3.15 that can lead to integer overflow and truncation issues. This vulnerability, related to earlier vulnerabilities, can affect system stability and integrity when processing allocations for system operations. Users are advised to update their procps-ng installations to mitigate potential security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

procps-ng, procps procps-ng 3.3.15

References

https://usn.ubuntu.com/3658-1/

vendor-advisoryx_refsource_UBUNTU

https://www.debian.org/security/2018/dsa-4208

vendor-advisoryx_refsource_DEBIAN

https://access.redhat.com/errata/RHSA-2018:1777

vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:

4.8

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

CVSS V3.0