The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's     proc_pid_readdir() returns PID entries in ascending numeric order, a process occupying a high PID can use     inotify events to determine when the process list is being scanned, and fork/exec to obtain a lower PID,     thus avoiding enumeration. An unprivileged attacker can hide a process from procps-ng's utilities by     exploiting a race condition in reading /proc/PID entries. This vulnerability affects procps and procps-ng     up to version 3.3.15, newer versions might be affected also. (CVE-2018-1121)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2018-1121

medium Nessus Plugin ID 222283

Version 1.4

Version 1.2

Version 1.1

Version 1.4 Aug 23, 2025, 2:29 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508230229
Version 1.2 Apr 28, 2025, 4:40 PM IAVM reference (Remove IAVM references from unpatched plugins) Plugin Feed: 202504281640
Version 1.1 Mar 5, 2025, 1:16 AM New Plugin Feed: 202503050116