Описание
procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 2:3.3.12-1ubuntu2.1 |
| bionic | released | 2:3.3.12-3ubuntu1.1 |
| devel | released | 2:3.3.15-2ubuntu1 |
| esm-infra-legacy/trusty | released | 1:3.3.9-1ubuntu2.3 |
| esm-infra/bionic | released | 2:3.3.12-3ubuntu1.1 |
| esm-infra/xenial | released | 2:3.3.10-4ubuntu2.4 |
| precise/esm | not-affected | 1:3.2.8-11ubuntu6.6 |
| trusty | released | 1:3.3.9-1ubuntu2.3 |
| trusty/esm | released | 1:3.3.9-1ubuntu2.3 |
| upstream | released | 3.3.15 |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.
procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.
procps-ng before version 3.3.15 is vulnerable to a stack buffer overfl ...
procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.
Уязвимость функции pgrep набора консольных приложений для мониторинга и завершения системных процессов Props-ng, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5 Medium
CVSS2
7.5 High
CVSS3