CVE-2018-1123

7.5 highEPSS 8.9%

High (7.5). EPSS 8.9% chance of exploitation in the next 30 days.

procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 8.9% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWEs: CWE-122, CWE-119
Published: 2018-05-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
debian:debian_linux
procps-ng_project:procps-ng

References

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.html
http://seclists.org/oss-sec/2018/q2/122
http://www.securityfocus.com/bid/104214
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1123

Check your stack JSON