PT-2018-3528
CVE-2018-1123
·
Publicado
2018-05-07
·
Atualizado
2024-06-15
Descrição por
CVSS 2.0
7.8
AltaMétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions:
procps-ng versions prior to 3.3.15
Description:
The issue is related to a buffer overflow in the ps command, which can cause a denial of service. This is due to an out-of-bounds operation in memory. The impact is limited to a crash, resulting in a temporary denial of service, because of an inbuilt protection mechanism that maps a guard page at the end of the overflowed buffer.
Recommendations:
For versions prior to 3.3.15, update to version 3.3.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the ps command to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾