Procps Project

procps_project

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Procps

procps

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4016 2Fedoraproject Procps Project 2Fedora Procps Nov 21, 2024 Aug 2, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.
CVE-2018-1121 1Procps Project 1Procps Nov 21, 2024 Jun 13, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() returns PID entries in ascending numeric order, a process occupying a high PID can use inotify events to d...Show more procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() returns PID entries in ascending numeric order, a process occupying a high PID can use inotify events to determine when the process list is being scanned, and fork/exec to obtain a lower PID, thus avoiding enumeration. An unprivileged attacker can hide a process from procps-ng's utilities by exploiting a race condition in reading /proc/PID entries. This vulnerability affects procps and procps-ng up to version 3.3.15, newer versions might be affected also.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-4016

2Fedoraproject

Procps Project

2Fedora

Procps

Nov 21, 2024

Aug 2, 2023

N/A· v4

3.3 LOW· v3

N/A· v2

Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

CVE-2018-1121

1Procps Project

1Procps

Nov 21, 2024

Jun 13, 2018

N/A· v4

5.9 MEDIUM· v3

4.3 MEDIUM· v2

procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() returns PID entries in ascending numeric order, a process occupying a high PID can use inotify events to determine when the process list is being scanned, and fork/exec to obtain a lower PID, thus avoiding enumeration. An unprivileged attacker can hide a process from procps-ng's utilities by exploiting a race condition in reading /proc/PID entries. This vulnerability affects procps and procps-ng up to version 3.3.15, newer versions might be affected also.Show less