CVE-2018-1123CWE-122
procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow
Low · published May 23, 2018
What it is
procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).
The record
Technical detail
- CVSS v3.0
- 3.9 · LOW
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.08902 · 95.2th percentile
- Weakness
- CWE-122 · Heap-based Buffer Overflow
- Published
- 2018-05-23T14:00Z
EPSS history
Timeline