CVEDB API

Vulnerability Details CVE-2018-1124

procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.9%

CVSS Severity

CVSS v3 Score 7.3

CVSS v2 Score 4.6

References

Products affected by CVE-2018-1124

Procps-Ng Project » Procps-Ng » Version: 3.3.0

cpe:2.3:a:procps-ng_project:procps-ng:3.3.0
Procps-Ng Project » Procps-Ng » Version: 3.3.1

cpe:2.3:a:procps-ng_project:procps-ng:3.3.1
Procps-Ng Project » Procps-Ng » Version: 3.3.10

cpe:2.3:a:procps-ng_project:procps-ng:3.3.10
Procps-Ng Project » Procps-Ng » Version: 3.3.11

cpe:2.3:a:procps-ng_project:procps-ng:3.3.11
Procps-Ng Project » Procps-Ng » Version: 3.3.12

cpe:2.3:a:procps-ng_project:procps-ng:3.3.12
Procps-Ng Project » Procps-Ng » Version: 3.3.13

cpe:2.3:a:procps-ng_project:procps-ng:3.3.13
Procps-Ng Project » Procps-Ng » Version: 3.3.14

cpe:2.3:a:procps-ng_project:procps-ng:3.3.14
Procps-Ng Project » Procps-Ng » Version: 3.3.2

cpe:2.3:a:procps-ng_project:procps-ng:3.3.2
Procps-Ng Project » Procps-Ng » Version: 3.3.3

cpe:2.3:a:procps-ng_project:procps-ng:3.3.3
Procps-Ng Project » Procps-Ng » Version: 3.3.4

cpe:2.3:a:procps-ng_project:procps-ng:3.3.4
Procps-Ng Project » Procps-Ng » Version: 3.3.5

cpe:2.3:a:procps-ng_project:procps-ng:3.3.5
Procps-Ng Project » Procps-Ng » Version: 3.3.6

cpe:2.3:a:procps-ng_project:procps-ng:3.3.6
Procps-Ng Project » Procps-Ng » Version: 3.3.7

cpe:2.3:a:procps-ng_project:procps-ng:3.3.7
Procps-Ng Project » Procps-Ng » Version: 3.3.8

cpe:2.3:a:procps-ng_project:procps-ng:3.3.8
Procps-Ng Project » Procps-Ng » Version: 3.3.9

cpe:2.3:a:procps-ng_project:procps-ng:3.3.9
Schneider-Electric » Struxureware Data Center Expert » Version: 7.3.1

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.3.1
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.0

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.0
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.1

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.1
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.2

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.2
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.3

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.3
Schneider-Electric » Struxureware Data Center Expert » Version: 7.5.0

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.5.0
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 17.10

cpe:2.3:o:canonical:ubuntu_linux:17.10
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Opensuse » Leap » Version: 15.0

cpe:2.3:o:opensuse:leap:15.0
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux:7.5
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1124

Products

Pricing

Contact Us