Skip to content
OpenAdvisories
Medium · 4.8 CVE-2018-1126 EUVD-2018-11770GHSA-3vhp-j7w2-qxhv

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. T…

Published May 23, 2018 · Updated Dec 17, 2025 · Assigned by redhat

Vendor: [UNKNOWN] Product: procps-ng, procps Package: procps Package: procps Ecosystem: Debian Ecosystem: Ubuntu

Description

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.

Affected products

VendorProductAffectedFixed
[UNKNOWN] procps-ng, procps procps-ng 3.3.15 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 procps 2:3.3.15-1 —
Debian 13 procps 2:3.3.15-1 —
Debian 12 procps 2:3.3.15-1 —
Debian 9 procps 2:3.3.12-3+deb9u1 DSA-4208-1
Debian 8 procps 2:3.3.9-9+deb8u1 DSA-4208-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 7 procps 1:3.3.3-3+deb7u1 DLA-1390-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS procps 2:3.3.12-3ubuntu1.1 USN-3658-1
Ubuntu 16.04 LTS procps 2:3.3.10-4ubuntu2.4 USN-3658-1
Ubuntu 14.04 LTS procps 1:3.3.9-1ubuntu2.3 USN-3658-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 imgbased +1 1.0.17-0.1.el7ev RHSA-2018:1820
RHEL 7 procps-ng +2 3.3.10-17.el7_5.2 RHSA-2018:1700
RHEL 7 redhat-release-virtualization-host +1 4.2-3.1.el7 RHSA-2018:1820
RHEL 7 redhat-virtualization-host +1 4.2-20180531.0.el7_5 RHSA-2018:1820
RHEL 6 procps +1 3.2.8-45.el6_9.3 RHSA-2018:1777
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7.4 EUS procps-ng +2 3.3.10-16.el7_4.1 RHSA-2019:1944
RHEL 6.7 EUS procps +1 3.2.8-35.el6_7.1 RHSA-2018:2267
RHEL 6.6 TUS procps +1 3.2.8-30.el6_6.1 RHSA-2018:2268
RHEL 6.6 AUS procps +1 3.2.8-30.el6_6.1 RHSA-2018:2268

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP1 procps 3.3.15-7.7.26 SUSE-SU-2019:2730-1
SLES 15 procps 3.3.15-7.7.26 SUSE-SU-2019:2730-1
SLES 12 SP4 procps 3.3.9-11.18.1 SUSE-SU-2019:0450-1
SLES 12 SP3 procps 3.3.9-11.11.1 SUSE-SU-2019:0450-1, SUSE-SU-2018:2451-2, SUSE-SU-2018:1836-1
SLES 12 SP2 procps 3.3.9-11.18.1 SUSE-SU-2019:0450-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP1 procps 3.3.9-11.18.1 SUSE-SU-2019:0450-1
SLES 12 procps 3.3.9-11.18.1 SUSE-SU-2019:0450-1
SLES 11 SP4 procps 3.2.7-152.31.1 SUSE-SU-2018:2042-1
SLES for SAP 12 SP4 procps 3.3.9-11.18.1 SUSE-SU-2019:0450-1
SLES for SAP 12 SP3 procps 3.3.9-11.11.1 SUSE-SU-2019:0450-1, SUSE-SU-2018:2451-2, SUSE-SU-2018:1836-1
SLES for SAP 12 SP2 procps 3.3.9-11.18.1 SUSE-SU-2019:0450-1
SLES for SAP 12 SP1 procps 3.3.9-11.18.1 SUSE-SU-2019:0450-2
SLES for SAP 11 SP4 procps 3.2.7-152.31.1 SUSE-SU-2018:2042-1
SUSE OpenStack Cloud 7 procps 3.3.9-11.18.1 SUSE-SU-2019:0450-1
SUSE Enterprise Storage 4 procps 3.3.9-11.18.1 SUSE-SU-2019:0450-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed procps 3.3.17-5.2 openSUSE-SU-2024:11195-1
openSUSE Leap 15.1 procps 3.3.15-lp151.6.3.1 openSUSE-SU-2019:2376-1
openSUSE Leap 15.0 procps 3.3.15-lp150.5.3.1 openSUSE-SU-2019:2379-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 procps-ng +2 3.3.10-17.amzn2.2 ALAS2-2018-1031

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 procps-ng +2 3.3.10-17.el7_5.2 ELSA-2018-1700

Advisories 20

References