Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-1125
7.5
HIGHCVSS v3
Published
May 23, 2018
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is compiled with FORTIFY (as on Red Hat Enterprise Linux and Fedora), the impact is limited to a crash.
Docker Hub