EDB-44806
PoCProcps-ng - Multiple Vulnerabilities
view exploit source exploit_dbtype localauthor Qualys Corporationpublished 2018-05-30catalog exploit_db
01
exploited CVEs (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-1120US | medium5.3 | Exploit | ||
A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings),… | ||||
| CVE-2018-1121US | medium5.9 | Exploit | ||
procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() returns PID entries in ascending numeric order, a process occupyin… | ||||
| CVE-2018-1123US | high7.5 | Exploit | ||
procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer,… | ||||
| CVE-2018-1122US | high7.0 | Exploit | ||
procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could ach… | ||||
| CVE-2018-1124US | high7.8 | Exploit | ||
procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local att… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan