CVE-2018-1123
LOWprocps-ng < 3.3.15 - Denial of Service via mmap Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2018-1123. PoCs published by Qualys Corporation, aravinddathd.
AI-analyzed exploit summary This is a Qualys Security Advisory detailing multiple vulnerabilities in procps-ng, including CVE-2018-1124, which involves an integer overflow in libprocps's file2strvec() function leading to local privilege escalation. The advisory includes descriptions of vulnerabilities, proof-of-concept code snippets, and technical details.
Description
procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).
Exploits (2)
This is a Qualys Security Advisory detailing multiple vulnerabilities in procps-ng, including CVE-2018-1124, which involves an integer overflow in libprocps's file2strvec() function leading to local privilege escalation. The advisory includes descriptions of vulnerabilities, proof-of-concept code snippets, and technical details.
The repository contains only README files with no actual exploit code. It references CVE-2018-11235 but is labeled as CVE-2018-1123, indicating a possible typo or mislabeling.
References (14)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L