[UNKNOWN] procps-ng, procps
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-1121 | up to procps-ng 3.3.15 and newer | procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() returns PID entries in asc | MEDIUM 5.9 | 4.1 % | ||
| CVE-2018-1125 | procps-ng 3.3.15 | procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involve | HIGH 7.5 | 1.9 % | ||
| CVE-2018-1123 | procps-ng 3.3.15 | procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard p | HIGH 7.5 | 8.9 % | ||
| CVE-2018-1122 | procps-ng 3.3.15 | procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-cont | HIGH 7.3 | 1.3 % | ||
| CVE-2018-1126 | procps-ng 3.3.15 | procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. Th | CRITICAL 9.8 | 1.9 % |