CVE-2018-1125

Name of the Vulnerable Software and Affected Versions procps-ng versions prior to 3.3.15

Description The issue is related to a stack buffer overflow error in the pgrep function of the procps-ng set of console applications for monitoring and terminating system processes. This error can be exploited by a remote attacker using specially crafted processes, potentially leading to a denial of service. The impact is limited to a crash when pgrep is compiled with FORTIFY, as seen on Red Hat Enterprise Linux and Fedora.

Recommendations For versions prior to 3.3.15, update to version 3.3.15 or later to resolve the issue. As a temporary workaround, consider restricting the use of the pgrep function until a patch is available.