CVE-2018-1124
HIGHCVSS 7.8/10EPSS 1.83%
Last modified
CVE-2018-1124 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.. EPSS estimates a 1.83% chance of exploitation in the next 30 days.
Description
procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Procps-Ng Project | Procps-Ng | < 3.3.15 |
| Canonical | Ubuntu Linux | 14.04 |
| Canonical | Ubuntu Linux | 16.04 |
| Canonical | Ubuntu Linux | 17.10 |
| Canonical | Ubuntu Linux | 18.04 |
| Debian | Debian Linux | 7.0 |
| Debian | Debian Linux | 8.0 |
| Debian | Debian Linux | 9.0 |
| Redhat | Enterprise Linux | 6.0 |
| Redhat | Enterprise Linux | 7.0 |
| Redhat | Enterprise Linux | 7.5 |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Server | 6.0 |
| Redhat | Enterprise Linux Server | 7.0 |
| Redhat | Enterprise Linux Workstation | 6.0 |
| Redhat | Enterprise Linux Workstation | 7.0 |
| Schneider-Electric | Struxureware Data Center Expert | < 7.6.0 |
| Opensuse | Leap | 15.0 |
| Opensuse | Leap | 15.1 |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.htmlMailing List, Third Party Advisory
- http://seclists.org/oss-sec/2018/q2/122Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/104214Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041057Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1700Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1777Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1820Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2267Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2268Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1944Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2401Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1124Issue Tracking, Third Party Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10241Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00021.htmlThird Party Advisory
- https://security.gentoo.org/glsa/201805-14Third Party Advisory
- https://usn.ubuntu.com/3658-1/Third Party Advisory
- https://usn.ubuntu.com/3658-2/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4208Third Party Advisory
- https://www.exploit-db.com/exploits/44806/Third Party Advisory, VDB Entry
- https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txtExploit, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.htmlMailing List, Third Party Advisory
- http://seclists.org/oss-sec/2018/q2/122Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/104214Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041057Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1700Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1777Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1820Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2267Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2268Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1944Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2401Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1124Issue Tracking, Third Party Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10241Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00021.htmlThird Party Advisory
- https://security.gentoo.org/glsa/201805-14Third Party Advisory
- https://usn.ubuntu.com/3658-1/Third Party Advisory
- https://usn.ubuntu.com/3658-2/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4208Third Party Advisory
- https://www.exploit-db.com/exploits/44806/Third Party Advisory, VDB Entry
- https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txtExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-1124?
procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.
How severe is CVE-2018-1124?
CVE-2018-1124 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 1.83% probability of exploitation in the next 30 days.
How do I fix CVE-2018-1124?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2018-1124?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST