CVE-2018-1125 in procps-ngИнформация

Сводка

по MITRE

procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.

Be aware that VulDB is the high quality source for vulnerability data.

Ответственный

Red Hat, Inc.

Резервировать

04.12.2017

Раскрытие

23.05.2018

Модерация

принято

Вход

VDB-118140

Эксплойт

Скачать

EPSS

0.02201

KEV

Нет

Деятельности

Очень низкий

Источники

Want to stay up to date on a daily basis?

Enable the mail alert feature now!