CVE-2018-1125

procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.

• CWE-121
• CWE-787
• CWE-121

• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.htmlMailing List, Third Party Advisory
• http://seclists.org/oss-sec/2018/q2/122Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104214Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1125Issue Tracking
• https://lists.debian.org/debian-lts-announce/2018/05/msg00021.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3658-1/Third Party Advisory
• https://usn.ubuntu.com/3658-3/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4208Third Party Advisory
• https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txtExploit, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.htmlMailing List, Third Party Advisory
• http://seclists.org/oss-sec/2018/q2/122Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104214Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1125Issue Tracking
• https://lists.debian.org/debian-lts-announce/2018/05/msg00021.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3658-1/Third Party Advisory
• https://usn.ubuntu.com/3658-3/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4208Third Party Advisory
• https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txtExploit, Third Party Advisory

Published

May 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11243PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows re…
• CVE-2018-11244The BBE theme before 1.53 for WordPress allows a direct laun…
• CVE-2018-11245app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS wi…
• CVE-2018-11246K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 ha…7.5
• CVE-2018-11247The JMX/RMI interface in Nasdaq BWise 5.0 does not require a…
• CVE-2018-11248util/FileDownloadUtils.java in FileDownloader 1.7.3 does not…
• CVE-2018-11251In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a he…
• CVE-2018-11254An issue was discovered in PoDoFo 0.9.5. There is an Excessi…
• CVE-2018-11255An issue was discovered in PoDoFo 0.9.5. The function PdfPag…
• CVE-2018-11256An issue was discovered in PoDoFo 0.9.5. The function PdfDoc…
• CVE-2018-11257Permissions, Privileges, and Access Controls in TA in Snapdr…
• CVE-2018-11258In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and …