Buffer overflow in procps - CVE-2018-1123

Vulnerability identifier: #VU12976

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1123

CWE-ID: CWE-120

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to ps mmap()s its output buffer and mprotect()s its last page with PROT_NONE (an effective guard page). A remote attacker can trick the victim into opening a specially crafted input, overflow the output buffer of ps and cause the service to crash.

procps
Debian Linux
Gentoo Linux
Arch Linux
Slackware Linux
Opensuse
openSUSE Leap
Dynamic System Analysis (DSA) Preboot
Flex System Chassis Management Module (CMM)
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)

Update to version 3.3.15.

Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
Flex System Chassis Management Module (CMM) - update to 2pet16d-2.5.13d
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.0.0.5.116
Dell EMC Unity Operating Environment (OE) - update to 5.0.0.0.5.116

• Exploit #6361 - Procps-ng - Multiple Vulnerabilities (June 17, 2021)

• https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txt

• Multiple vulnerabilities in procps
• Slackware Linux update for procps-ng
• Debian update for procps
• Gentoo update for procps
• Arch Linux update for procps-ng
• OpenSUSE Linux update for procps
• OpenSUSE Linux update for procps
• OpenSUSE Linux update for procps
• OpenSUSE Linux update for procps
• Multiple vulnerabilities in Dell EMC Unity Family
• Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot
• Multiple vulnerabilities in IBM Flex System Chassis Management Module (CMM)