Vulnerability in procps package - Local Privilege Escalation and Denial of Service
Summary
DLA-1390-1: procps - security update. Affects procps versions < 1:3.3.3-3+deb7u1. Fixed in 1:3.3.3-3+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The procps package is a set of command line and full screen utilities for browsing procfs, which provides an interface to kernel data structures. It includes various tools such as top, ps, and pgrep, which are commonly used for process monitoring and management. These utilities are widely used in Linux-based systems, including Debian 7 Wheezy.
Vulnerability Detail
Multiple vulnerabilities have been discovered in the procps package. These vulnerabilities include:
-
CVE-2018-1122: The 'top' utility reads its configuration from the current working directory if no $HOME is configured. If 'top' is started from a directory writable by an attacker, it could result in local privilege escalation.
-
CVE-2018-1123: The 'ps' utility can be used to invoke processes of other users, leading to a denial of service.
-
CVE-2018-1124: An integer overflow in the 'file2strvec()' function of libprocps could result in local privilege escalation.
-
CVE-2018-1125: The 'pgrep' utility is vulnerable to a stack-based buffer overflow, which could lead to denial of service if a specially crafted process is inspected.
-
CVE-2018-1126: Incorrect integer size parameters used in wrappers for standard C allocators could cause integer truncation and lead to integer overflow issues.
These vulnerabilities pose a risk of local privilege escalation, denial of service, and potential code execution.
How To Fix
Minimum fixed version
1:3.3.3-3+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade procpsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for these vulnerabilities. It is recommended to apply the fix by upgrading the procps package as mentioned above.
Conclusion
The procps package in Debian 7 Wheezy is affected by multiple vulnerabilities that could lead to local privilege escalation, denial of service, and potential code execution. It is crucial to upgrade the procps package to version 1:3.3.3.3+deb7u1 or later to mitigate these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for procps →
FAQ
These vulnerabilities can allow an attacker to escalate their privileges, perform denial of service attacks, and potentially execute arbitrary code on the affected system.
These vulnerabilities are specific to procps version 1:3.3.3-3+deb7u1 and earlier. Upgrading to version 1:3.3.3.3+deb7u1 or later fixes the vulnerabilities.
No, these vulnerabilities require local access to the system in order to exploit them.
There is no information available regarding active exploitation of these vulnerabilities at the moment.
You can find more information about Debian LTS security advisories, how to apply updates, and frequently asked questions at the following link: https://wiki.debian.org/LTS
Related vulnerabilities
Recent vulnerabilities recorded for procps.
