CVE-2023-4016CWE-122CWE-787
CVE-2023-4016
Low · published August 2, 2023
What it is
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.
The record
Technical detail
- CVSS v3.1
- 2.5 · LOW
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00295 · 21.0th percentile
- Weaknesses
- CWE-122 · Heap-based Buffer Overflow; CWE-787 · Out-of-bounds Write
- Published
- 2023-08-02T09:15Z
Affected products (2)
| Product | Versions | Fixed in |
|---|
| procps_project/procps | ≥ 3.3.0, ≤ 4.0.3 | — |
| fedoraproject/fedora | all versions | — |
References (5)
EPSS history
Timeline