Wind River Support Network

HomeDefectsLIN10-3979
Fixed

LIN10-3979 : Security Advisory - linux - CVE-2018-1120

Created: May 24, 2018    Updated: Dec 3, 2018
Resolved Date: Jul 1, 2018
Found In Version: 10.17.41.7
Fix Version: 10.17.41.9
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Kernel

Description

An attacker can block any read() access to /proc/PID/cmdline by mmap()ing a FUSE file (Filesystem in Userspace) onto this process's command-line arguments. The attacker can therefore block pgrep, pidof, pkill, ps, and w, either forever (a denial of service), or for some controlled time (a synchronization tool for exploiting other vulnerabilities).

https://security.archlinux.org/CVE-2018-1120
https://www.securityfocus.com/bid/104229/discuss
https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txt

Other Downloads


CVEs


Live chat
Online