Search CVE reports


Toggle filters

1 – 7 of 7 results


CVE-2023-4016

Low priority

Some fixes available 6 of 7

Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

1 affected package

procps

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
procps Not affected Not affected Fixed Fixed Fixed
Show less packages

CVE-2018-1126

Medium priority
Fixed

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.

1 affected package

procps

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
procps — — — — Fixed
Show less packages

CVE-2018-1125

Medium priority
Fixed

procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on...

1 affected package

procps

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
procps — — — — Fixed
Show less packages

CVE-2018-1124

Medium priority
Fixed

procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting...

1 affected package

procps

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
procps — — — — Fixed
Show less packages

CVE-2018-1123

Medium priority
Fixed

procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited...

1 affected package

procps

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
procps — — — — Fixed
Show less packages

CVE-2018-1122

Medium priority
Fixed

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of...

1 affected package

procps

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
procps — — — — Fixed
Show less packages

CVE-2018-1120

Medium priority

Some fixes available 21 of 26

A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or...

97 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Fixed
linux-aws — Not affected Not affected Not affected Fixed
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.14 — Not affected Not in release Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Fixed
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.11 — Ignored Not in release Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Fixed
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Ignored Not in release
linux-azure-nvidia — Not affected Not in release Not in release Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Fixed
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.11 — Ignored Not in release Not in release Not in release
linux-gcp-6.14 — Not affected Not in release Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Not affected
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Not affected
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-hwe-6.14 — Not affected Not in release Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-ibm-6.8 — Not in release Not affected Not in release Not in release
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Fixed
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.11 — Not affected Not in release Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-nvidia-tegra — Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 — Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx — Not in release Not affected Not in release Not in release
linux-oem — Not in release Not in release Not in release Fixed
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.14 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Not affected
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.14 — Not affected Not in release Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Fixed
linux-realtime — Not affected Not affected Not in release Not in release
linux-realtime-6.14 — Not affected Not in release Not in release Not in release
linux-realtime-6.8 — Not in release Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.14 — Not affected Not in release Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
procps — Not affected Not affected Not affected Not affected
Show all 97 packages Show less packages