NetSight
IP …
high7.8Public exploit code

CVE-2018-1124

procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.

Affected products

VendorProductAffected versions
Procps-Ng ProjectProcps-Ng
before 3.3.15
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10, 18.04
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux
Versions 6.0, 7.0, 7.5
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
Schneider-ElectricStruxureware Data Center Expert
before 7.6.0
OpensuseLeap
Versions 15.0, 15.1

Weakness classification

CWE-122CWE-190CWE-787

References