Wind River Support Network

HomeDefectsLIN7-9829
Fixed

LIN7-9829 : Security Advisory - procps - CVE-2018-1123

Created: May 24, 2018    Updated: Oct 26, 2018
Resolved Date: Aug 27, 2018
Found In Version: 7.0.0.28
Fix Version: 7.0.0.29
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

Denial of Service in ps (CVE-2018-1123)

An attacker can overflow the output buffer of ps, when executed by another user, administrator, or script: a denial of service only (not an LPE), because ps mmap()s its output buffer and mprotect()s its last page with PROT_NONE (an effective guard page).

https://security.archlinux.org/CVE-2018-1123
https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txt

Other Downloads


CVEs


Live chat
Online