procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Base Score: 3.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-procps | May 24, 2018 | May 22, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-process-procps | May 31, 2018 | May 23, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-procps-ng | Jul 23, 2018 | May 23, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-procps-ng | Aug 10, 2018 | May 23, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-emacs-gitoracle-linux-upgrade-emacs-git-eloracle-linux-upgrade-gitoracle-linux-upgrade-git-alloracle-linux-upgrade-git-bzroracle-linux-upgrade-git-cvsoracle-linux-upgrade-git-daemonoracle-linux-upgrade-git-emailoracle-linux-upgrade-git-guioracle-linux-upgrade-git-hgoracle-linux-upgrade-git-p4oracle-linux-upgrade-git-svnoracle-linux-upgrade-gitkoracle-linux-upgrade-gitweboracle-linux-upgrade-perl-gitoracle-linux-upgrade-perl-git-svn | Jun 21, 2018 | May 22, 2018 |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | May 23, 2018 |
| Suse | — | suse-upgrade-libprocps3suse-upgrade-libprocps7suse-upgrade-procpssuse-upgrade-procps-devel | Jun 29, 2018 | May 22, 2018 |
| Ubuntu | ubuntu-upgrade-libprocps3ubuntu-upgrade-libprocps4ubuntu-upgrade-libprocps6ubuntu-upgrade-procps | Jun 1, 2018 | May 22, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub