Buffer overflow in procps - CVE-2018-1123

 

Buffer overflow in procps - CVE-2018-1123

Published: May 22, 2018 / Updated: June 17, 2021


Vulnerability identifier: #VU12976
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Clear
CVE-ID: CVE-2018-1123
CWE-ID: CWE-120
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vendor: procps-ng
Affected software:
procps

Detailed vulnerability description

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to ps mmap()s its output buffer and mprotect()s its last page with PROT_NONE (an effective guard page). A remote attacker can trick the victim into opening a specially crafted input, overflow the output buffer of ps and cause the service to crash.

How to mitigate CVE-2018-1123

Update to version 3.3.15.

Sources