CVE-2018-1125CWE-121

procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep

Medium · published May 23, 2018

CVSS v3.0
4.4
EPSS
2%
Percentile
79.0
In the wild
Unconfirmed
What it is

procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.

The record
Technical detail
CVSS v3.0
4.4 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01856 · 79.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2018-05-23T14:00Z
EPSS history
Timeline
  • 23 MAY 14:00Z
    procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep
    cvelistv5