CVE-2018-1123CWE-122

procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow

Low · published May 23, 2018

CVSS v3.0
3.9
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).

The record
Technical detail
CVSS v3.0
3.9 · LOW
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.08902 · 95.2th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2018-05-23T14:00Z
EPSS history
Timeline
  • 23 MAY 14:00Z
    procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow
    cvelistv5