Fixed
Created: May 24, 2018
Updated: Aug 28, 2018
Resolved Date: Jun 5, 2018
Found In Version: 10.17.41.7
Fix Version: 10.17.41.8
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace
Denial of Service in ps (CVE-2018-1123)
An attacker can overflow the output buffer of ps, when executed by another user, administrator, or script: a denial of service only (not an LPE), because ps mmap()s its output buffer and mprotect()s its last page with PROT_NONE (an effective guard page).
https://security.archlinux.org/CVE-2018-1123
https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txt
