CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1126

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.9%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-1126

Procps-Ng Project » Procps-Ng » Version: 3.3.0

cpe:2.3:a:procps-ng_project:procps-ng:3.3.0
Procps-Ng Project » Procps-Ng » Version: 3.3.1

cpe:2.3:a:procps-ng_project:procps-ng:3.3.1
Procps-Ng Project » Procps-Ng » Version: 3.3.10

cpe:2.3:a:procps-ng_project:procps-ng:3.3.10
Procps-Ng Project » Procps-Ng » Version: 3.3.11

cpe:2.3:a:procps-ng_project:procps-ng:3.3.11
Procps-Ng Project » Procps-Ng » Version: 3.3.12

cpe:2.3:a:procps-ng_project:procps-ng:3.3.12
Procps-Ng Project » Procps-Ng » Version: 3.3.13

cpe:2.3:a:procps-ng_project:procps-ng:3.3.13
Procps-Ng Project » Procps-Ng » Version: 3.3.14

cpe:2.3:a:procps-ng_project:procps-ng:3.3.14
Procps-Ng Project » Procps-Ng » Version: 3.3.2

cpe:2.3:a:procps-ng_project:procps-ng:3.3.2
Procps-Ng Project » Procps-Ng » Version: 3.3.3

cpe:2.3:a:procps-ng_project:procps-ng:3.3.3
Procps-Ng Project » Procps-Ng » Version: 3.3.4

cpe:2.3:a:procps-ng_project:procps-ng:3.3.4
Procps-Ng Project » Procps-Ng » Version: 3.3.5

cpe:2.3:a:procps-ng_project:procps-ng:3.3.5
Procps-Ng Project » Procps-Ng » Version: 3.3.6

cpe:2.3:a:procps-ng_project:procps-ng:3.3.6
Procps-Ng Project » Procps-Ng » Version: 3.3.7

cpe:2.3:a:procps-ng_project:procps-ng:3.3.7
Procps-Ng Project » Procps-Ng » Version: 3.3.8

cpe:2.3:a:procps-ng_project:procps-ng:3.3.8
Procps-Ng Project » Procps-Ng » Version: 3.3.9

cpe:2.3:a:procps-ng_project:procps-ng:3.3.9
Schneider-Electric » Struxureware Data Center Expert » Version: 7.3.1

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.3.1
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.0

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.0
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.1

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.1
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.2

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.2
Schneider-Electric » Struxureware Data Center Expert » Version: 7.4.3

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.3
Schneider-Electric » Struxureware Data Center Expert » Version: 7.5.0

cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.5.0
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 17.10

cpe:2.3:o:canonical:ubuntu_linux:17.10
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_server:7.5
Redhat » Enterprise Linux Server Aus » Version: 6.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6
Redhat » Enterprise Linux Server Tus » Version: 6.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1126

Products

Pricing

Contact Us