Procps-ng Project Procps-ng — known CVE vulnerabilities

Every CVE whose affected-product data names Procps-ng Project Procps-ng, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2018-1124 — CVSS 7.8 (high): procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This…
• CVE-2018-1125 — CVSS 7.5 (high): procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it…
• CVE-2018-1122 — CVSS 7.3 (high): procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an…
• CVE-2018-1126 — CVSS 4.8 (medium): procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues…
• CVE-2018-1123 — CVSS 3.9 (low): procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard…