Integer Overflow or Wraparound

Affecting procps package, versions <2:3.3.9-9+deb8u1

Overview

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.

References

• CONFIRM
• Debian Security Advisory
• Debian Security Announcement
• Debian Security Tracker
• MISC
• Oss-Sec Mailing List
• RHSA Security Advisory
• RHSA Security Advisory
• RHSA Security Advisory
• RHSA Security Advisory
• RHSA Security Advisory
• RHSA Security Advisory
• RedHat Bugzilla Bug
• SUSE
• SUSE
• Security Focus
• Security Tracker
• Ubuntu CVE Tracker
• Ubuntu Security Advisory
• Ubuntu Security Advisory