PT-2018-3528
CVE-2018-1123
·
تاريخ النشر
2018-05-07
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions:
procps-ng versions prior to 3.3.15
Description:
The issue is related to a buffer overflow in the ps command, which can cause a denial of service. This is due to an out-of-bounds operation in memory. The impact is limited to a crash, resulting in a temporary denial of service, because of an inbuilt protection mechanism that maps a guard page at the end of the overflowed buffer.
Recommendations:
For versions prior to 3.3.15, update to version 3.3.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the ps command to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾