CVE-2018-1125 in procps-ngالمعلومات

الملخص

بحسب MITRE

procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.

Be aware that VulDB is the high quality source for vulnerability data.

مسؤول

Red Hat, Inc.

حجز

04/12/2017

إفشاء

23/05/2018

الاعتدال

تمت الموافقة

إدخال

VDB-118140

استغلال

تحميل

EPSS

0.02201

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to know what is going to be exploited?

We predict KEV entries!