CVE-2018-1126CWE-190

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues

Medium · published May 23, 2018

CVSS v3.0
4.8
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.

The record
Technical detail
CVSS v3.0
4.8 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01876 · 79.2th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2018-05-23T13:00Z
EPSS history
Timeline
  • 23 MAY 13:00Z
    procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues
    cvelistv5