CVE-2018-1124MEDIUM
Description
procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.
References
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.html
http://seclists.org/oss-sec/2018/q2/122
http://www.securityfocus.com/bid/104214
http://www.securitytracker.com/id/1041057
https://access.redhat.com/errata/RHSA-2018:1700
https://access.redhat.com/errata/RHSA-2018:1777
https://access.redhat.com/errata/RHSA-2018:1820
https://access.redhat.com/errata/RHSA-2018:2267
https://access.redhat.com/errata/RHSA-2018:2268
https://access.redhat.com/errata/RHSA-2019:1944
https://access.redhat.com/errata/RHSA-2019:2401
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1124
https://kc.mcafee.com/corporate/index?page=content&id=SB10241
https://lists.debian.org/debian-lts-announce/2018/05/msg00021.html
https://security.gentoo.org/glsa/201805-14
https://usn.ubuntu.com/3658-1/
https://usn.ubuntu.com/3658-2/
https://www.debian.org/security/2018/dsa-4208
https://www.exploit-db.com/exploits/44806/
https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txt
Details
Source: MITRE
Published: 2018-05-23
Updated: 2020-09-09
Type: CWE-787
Risk Information
CVSS v2.0
Base Score: 4.6
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 3.9
Severity: MEDIUM
CVSS v3.0
Base Score: 7.8
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 1.8
Severity: HIGH
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Configuration 3
OR
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Configuration 4
OR
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Configuration 5
OR
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*
Configuration 6
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 130334 | openSUSE Security Update : procps (openSUSE-2019-2379) | Nessus | SuSE Local Security Checks | high |
| 130333 | openSUSE Security Update : procps (openSUSE-2019-2376) | Nessus | SuSE Local Security Checks | high |
| 130145 | SUSE SLED15 / SLES15 Security Update : procps (SUSE-SU-2019:2730-1) | Nessus | SuSE Local Security Checks | high |
| 127718 | RHEL 7 : procps-ng (RHSA-2019:2401) | Nessus | Red Hat Local Security Checks | medium |
| 127631 | RHEL 7 : procps-ng (RHSA-2019:1944) | Nessus | Red Hat Local Security Checks | high |
| 127432 | NewStart CGSL MAIN 4.05 : procps Multiple Vulnerabilities (NS-SA-2019-0155) | Nessus | NewStart CGSL Local Security Checks | high |
| 127394 | NewStart CGSL MAIN 4.05 : procps Multiple Vulnerabilities (NS-SA-2019-0135) | Nessus | NewStart CGSL Local Security Checks | high |
| 127175 | NewStart CGSL CORE 5.04 / MAIN 5.04 : procps-ng Multiple Vulnerabilities (NS-SA-2019-0019) | Nessus | NewStart CGSL Local Security Checks | high |
| 122607 | openSUSE Security Update : procps (openSUSE-2019-291) | Nessus | SuSE Local Security Checks | high |
| 122361 | SUSE SLED12 / SLES12 Security Update : procps (SUSE-SU-2019:0450-1) | Nessus | SuSE Local Security Checks | high |
| 121983 | Photon OS 2.0: Procps PHSA-2018-2.0-0084 | Nessus | PhotonOS Local Security Checks | high |
| 121877 | Photon OS 1.0: Procps PHSA-2018-1.0-0175 | Nessus | PhotonOS Local Security Checks | high |
| 121068 | Juniper Junos Space 18.4.x < 18.4R1 Multiple Vulnerabilities (JSA10917) | Nessus | Junos Local Security Checks | high |
| 120743 | Fedora 28 : procps-ng (2018-bba8fed5ab) | Nessus | Fedora Local Security Checks | high |
| 119211 | SUSE SLED12 / SLES12 Security Update : procps (SUSE-SU-2018:2451-2) | Nessus | SuSE Local Security Checks | high |
| 118428 | EulerOS Virtualization 2.5.0 : procps-ng (EulerOS-SA-2018-1340) | Nessus | Huawei Local Security Checks | high |
| 117583 | EulerOS Virtualization 2.5.1 : procps-ng (EulerOS-SA-2018-1274) | Nessus | Huawei Local Security Checks | high |
| 112035 | Photon OS 2.0: Openssl / Procps-ng / Perl PHSA-2018-2.0-0084 (deprecated) | Nessus | PhotonOS Local Security Checks | high |
| 111366 | RHEL 6 : procps (RHSA-2018:2268) | Nessus | Red Hat Local Security Checks | high |
| 111365 | RHEL 6 : procps (RHSA-2018:2267) | Nessus | Red Hat Local Security Checks | high |
| 111264 | SUSE SLES11 Security Update : procps (SUSE-SU-2018:2042-1) | Nessus | SuSE Local Security Checks | high |
| 110863 | EulerOS 2.0 SP3 : procps-ng (EulerOS-SA-2018-1199) | Nessus | Huawei Local Security Checks | high |
| 110862 | EulerOS 2.0 SP2 : procps-ng (EulerOS-SA-2018-1198) | Nessus | Huawei Local Security Checks | high |
| 110830 | openSUSE Security Update : procps (openSUSE-2018-685) | Nessus | SuSE Local Security Checks | high |
| 110804 | SUSE SLED12 / SLES12 Security Update : procps (SUSE-SU-2018:1836-1) | Nessus | SuSE Local Security Checks | high |
| 110467 | RHEL 7 : Virtualization (RHSA-2018:1820) | Nessus | Red Hat Local Security Checks | high |
| 110448 | Amazon Linux 2 : procps-ng (ALAS-2018-1031) | Nessus | Amazon Linux Local Security Checks | high |
| 110312 | Debian DLA-1390-1 : procps security update | Nessus | Debian Local Security Checks | high |
| 110306 | OracleVM 3.3 / 3.4 : procps (OVMSA-2018-0226) | Nessus | OracleVM Local Security Checks | high |
| 110296 | CentOS 6 : procps (CESA-2018:1777) | Nessus | CentOS Local Security Checks | high |
| 110282 | Scientific Linux Security Update : procps on SL6.x i386/x86_64 (20180531) | Nessus | Scientific Linux Local Security Checks | high |
| 110279 | RHEL 6 : procps (RHSA-2018:1777) | Nessus | Red Hat Local Security Checks | high |
| 110276 | Oracle Linux 6 : procps (ELSA-2018-1777) | Nessus | Oracle Linux Local Security Checks | high |
| 110255 | GLSA-201805-14 : procps: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | medium |
| 110204 | CentOS 7 : procps-ng (CESA-2018:1700) | Nessus | CentOS Local Security Checks | high |
| 110103 | Fedora 27 : procps-ng (2018-de5de06754) | Nessus | Fedora Local Security Checks | high |
| 110094 | Ubuntu 14.04 LTS / 16.04 LTS / 17.10 / 18.04 LTS : procps-ng vulnerabilities (USN-3658-1) | Nessus | Ubuntu Local Security Checks | high |
| 110088 | Scientific Linux Security Update : procps-ng on SL7.x x86_64 (20180523) | Nessus | Scientific Linux Local Security Checks | high |
| 110082 | RHEL 7 : procps-ng (RHSA-2018:1700) | Nessus | Red Hat Local Security Checks | high |
| 110070 | Oracle Linux 7 : procps-ng (ELSA-2018-1700) | Nessus | Oracle Linux Local Security Checks | high |
| 109969 | Debian DSA-4208-1 : procps - security update | Nessus | Debian Local Security Checks | high |
| 109950 | Slackware 14.2 / current : procps-ng (SSA:2018-142-03) | Nessus | Slackware Local Security Checks | high |