procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the config_file() function.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-procps-ngamazon-linux-ami-2-upgrade-procps-ng-debuginfoamazon-linux-ami-2-upgrade-procps-ng-develamazon-linux-ami-2-upgrade-procps-ng-i18n | Apr 27, 2020 | May 23, 2018 | |
| Centos_linux | — | centos-upgrade-procps-ngcentos-upgrade-procps-ng-debuginfocentos-upgrade-procps-ng-develcentos-upgrade-procps-ng-i18n | Aug 28, 2019 | May 23, 2018 |
| Debian | debian-upgrade-procps | May 24, 2018 | May 22, 2018 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Dec 29, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-process-procps | May 31, 2018 | May 23, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-procps-ng | Jul 23, 2018 | May 23, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-procps-ng | Aug 10, 2018 | May 23, 2018 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-shell-watch-3-3-15-11-4-18-0-1-1-0 | Jan 19, 2021 | May 23, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-procps-ngoracle-linux-upgrade-procps-ng-develoracle-linux-upgrade-procps-ng-i18n | Jul 21, 2020 | May 17, 2018 |
| Redhat_linux | — | redhat-upgrade-procps-ngredhat-upgrade-procps-ng-debuginforedhat-upgrade-procps-ng-develredhat-upgrade-procps-ng-i18n | Aug 7, 2019 | May 23, 2018 |
| Suse | — | suse-upgrade-libprocps3suse-upgrade-libprocps7suse-upgrade-procpssuse-upgrade-procps-devel | Jun 29, 2018 | May 22, 2018 |
| Ubuntu | ubuntu-upgrade-libprocps3ubuntu-upgrade-libprocps4ubuntu-upgrade-libprocps6ubuntu-upgrade-procps | Jun 1, 2018 | May 22, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub