Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0725-1

Опубликовано: 26 фев. 2025
Источник: suse-cvrf

Описание

Security update for procps

This update for procps fixes the following issues:

  • Integer overflow due to incomplete fix for CVE-2023-4016 can lead to segmentation fault in ps command when pid argument has a leading space (bsc#1236842, bsc#1214290).

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-BYOS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-SAP-BYOS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-SAP-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
SUSE Linux Enterprise Server 12 SP5-LTSS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
procps-devel-3.3.9-11.33.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
procps-devel-3.3.9-11.33.1

Ссылки

Описание

Under some circumstances, this weakness allows a user who has access to run the "ps" utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libprocps3-3.3.9-11.33.1
Container suse/ltss/sle12.5/sles12sp5:latest:procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-BYOS:libprocps3-3.3.9-11.33.1
Image SLES12-SP5-EC2-BYOS:procps-3.3.9-11.33.1
Ссылки
Уязвимость SUSE-SU-2025:0725-1