Approved changes feed: RSS · Atom
cpe:2.3:a:procps_project:procps:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Procps Project (f04fefab-3d67-5b07-baf5-a4ef2583d9a2) |
|---|---|
| Product | Procps (66ad8e20-7a23-55f0-8d5e-c0aa127df959) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/warmchang/procps |
purl2cpe | 2026-06-01 10:11:34.784426 |
pkg:gitlab/procps-ng/procps |
purl2cpe | 2026-06-01 10:11:34.784429 |
pkg:rpm/fedora/procps-ng |
purl2cpe | 2026-06-01 10:11:34.784432 |
pkg:rpm/opensuse/procps-ng |
purl2cpe | 2026-06-01 10:11:34.784435 |
pkg:sourceforge/procps-ng |
purl2cpe | 2026-06-01 10:11:34.784437 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4016 |
vulnerable | 2026-06-08 06:16:10.960981 |
Details available
LOW (2.5)
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.
Published: 2023-08-02T04:20:20.645Z
Updated: 2026-10-14T21:23:02.292Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1121 |
vulnerable | 2026-06-08 05:11:16.963356 |
Details available
LOW (3.9)
procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() returns PID entries in ascending numeric order, a process occupying a high PID can use inotify events to determine when the process list is being scanned, and fork/exec to obtain a lower PID, thus avoiding enumeration. An unprivileged attacker can hide a process from procps-ng's utilities by exploiting a race condition in reading /proc/PID entries. This vulnerability affects procps and procps-ng up to version 3.3.15, newer versions might be affected also.
Published: 2018-06-13T20:00:00.000Z
Updated: 2024-08-05T03:51:48.742Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.