CVE:CVE-2018-1126
CNNVD:CNNVD-201805-788
procps/procps-ng是一款使用在Linux平台中的用于提供proc文件系统进程信息的实用程序。
procps-ng 3.3.15之前版本中存在安全漏洞，该漏洞源于proc/alloc.*中不正确的整数值。攻击者可通过发送特制的请求利用该漏洞执行任意代码。
solution:Upgrade procps-ng_project procps-ng to a higher version than 3.3.15,and avoid the version (,3.3.15); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,7.5,and avoid the version 7.0,7.5; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade schneider-electric struxureware_data_center_expert to a higher version than 7.6.0,and avoid the version (,7.6.0)