CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1122

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the config_file() function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.4%

CVSS Severity

CVSS v3 Score 7.3

CVSS v2 Score 4.4

References

Products affected by CVE-2018-1122

Procps-Ng Project » Procps-Ng » Version: 3.3.0

cpe:2.3:a:procps-ng_project:procps-ng:3.3.0
Procps-Ng Project » Procps-Ng » Version: 3.3.1

cpe:2.3:a:procps-ng_project:procps-ng:3.3.1
Procps-Ng Project » Procps-Ng » Version: 3.3.10

cpe:2.3:a:procps-ng_project:procps-ng:3.3.10
Procps-Ng Project » Procps-Ng » Version: 3.3.11

cpe:2.3:a:procps-ng_project:procps-ng:3.3.11
Procps-Ng Project » Procps-Ng » Version: 3.3.12

cpe:2.3:a:procps-ng_project:procps-ng:3.3.12
Procps-Ng Project » Procps-Ng » Version: 3.3.13

cpe:2.3:a:procps-ng_project:procps-ng:3.3.13
Procps-Ng Project » Procps-Ng » Version: 3.3.14

cpe:2.3:a:procps-ng_project:procps-ng:3.3.14
Procps-Ng Project » Procps-Ng » Version: 3.3.2

cpe:2.3:a:procps-ng_project:procps-ng:3.3.2
Procps-Ng Project » Procps-Ng » Version: 3.3.3

cpe:2.3:a:procps-ng_project:procps-ng:3.3.3
Procps-Ng Project » Procps-Ng » Version: 3.3.4

cpe:2.3:a:procps-ng_project:procps-ng:3.3.4
Procps-Ng Project » Procps-Ng » Version: 3.3.5

cpe:2.3:a:procps-ng_project:procps-ng:3.3.5
Procps-Ng Project » Procps-Ng » Version: 3.3.6

cpe:2.3:a:procps-ng_project:procps-ng:3.3.6
Procps-Ng Project » Procps-Ng » Version: 3.3.7

cpe:2.3:a:procps-ng_project:procps-ng:3.3.7
Procps-Ng Project » Procps-Ng » Version: 3.3.8

cpe:2.3:a:procps-ng_project:procps-ng:3.3.8
Procps-Ng Project » Procps-Ng » Version: 3.3.9

cpe:2.3:a:procps-ng_project:procps-ng:3.3.9
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 17.10

cpe:2.3:o:canonical:ubuntu_linux:17.10
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1122

Products

Pricing

Contact Us