<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: procps-ng</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2018-1125: procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep</title><link>https://patchthecve.com/cve/CVE-2018-1125.html</link><guid>https://patchthecve.com/cve/CVE-2018-1125.html</guid><pubDate>Wed, 17 Jun 2026 01:50:32 +0000</pubDate><description>HIGH 7.5: procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.</description></item><item><title>CVE-2018-1123: procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow</title><link>https://patchthecve.com/cve/CVE-2018-1123.html</link><guid>https://patchthecve.com/cve/CVE-2018-1123.html</guid><pubDate>Wed, 17 Jun 2026 01:50:31 +0000</pubDate><description>LOW 3.9: procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).</description></item><item><title>CVE-2018-1122: procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top</title><link>https://patchthecve.com/cve/CVE-2018-1122.html</link><guid>https://patchthecve.com/cve/CVE-2018-1122.html</guid><pubDate>Wed, 17 Jun 2026 01:50:31 +0000</pubDate><description>HIGH 7.3: procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the config_file() function.</description></item><item><title>CVE-2018-1126: procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncati</title><link>https://patchthecve.com/cve/CVE-2018-1126.html</link><guid>https://patchthecve.com/cve/CVE-2018-1126.html</guid><pubDate>Wed, 17 Jun 2026 01:50:32 +0000</pubDate><description>MEDIUM 4.8: procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.</description></item><item><title>CVE-2018-1124: procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in fi</title><link>https://patchthecve.com/cve/CVE-2018-1124.html</link><guid>https://patchthecve.com/cve/CVE-2018-1124.html</guid><pubDate>Wed, 17 Jun 2026 01:50:31 +0000</pubDate><description>HIGH 7.8: procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution </description></item></channel></rss>