Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0725-1

Опубликовано: 26 фев. 2025
Источник: suse-cvrf

Описание

Security update for procps

This update for procps fixes the following issues:

  • Integer overflow due to incomplete fix for CVE-2023-4016 can lead to segmentation fault in ps command when pid argument has a leading space (bsc#1236842, bsc#1214290).

Список пакетов

Image SLES12-SP5-Azure-BYOS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-Azure-HPC-BYOS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-Azure-HPC-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-Azure-SAP-BYOS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-Azure-SAP-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-Azure-Standard-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-BYOS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-ECS-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-SAP-BYOS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-EC2-SAP-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-GCE-BYOS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-GCE-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-GCE-SAP-BYOS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-GCE-SAP-On-Demand
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
SUSE Linux Enterprise Server 12 SP5-LTSS
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
procps-devel-3.3.9-11.33.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libprocps3-3.3.9-11.33.1
procps-3.3.9-11.33.1
procps-devel-3.3.9-11.33.1

Ссылки

Описание

Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:libprocps3-3.3.9-11.33.1
Image SLES12-SP5-Azure-BYOS:procps-3.3.9-11.33.1
Image SLES12-SP5-Azure-HPC-BYOS:libprocps3-3.3.9-11.33.1
Image SLES12-SP5-Azure-HPC-BYOS:procps-3.3.9-11.33.1
Ссылки