Bug 2228494 (CVE-2023-4016) - CVE-2023-4016 procps: ps buffer overflow
Summary: CVE-2023-4016 procps: ps buffer overflow
Keywords:
Status: NEW
Alias: CVE-2023-4016
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2228503 2228504 2229182 2229183 2230186
Blocks: 2228501
TreeView+ depends on / blocked
 
Reported: 2023-08-02 13:24 UTC by Avinash Hanwate
Modified: 2023-12-21 20:28 UTC (History)
6 users (show)

Fixed In Version: procps 4.0.4rc1
Doc Type: If docs needed, set a value
Doc Text:
A heap-based buffer overflow vulnerability was found in the procps project when handling untrusted input with the -C option. This issue may allow a user with "ps" utility access to write unfiltered data into the process heap, triggering an out-of-bounds write, consuming memory and causing a crash, resulting in a denial of service.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2023:6705 0 None None None 2023-11-07 08:22:41 UTC
Red Hat Product Errata RHSA-2023:7187 0 None None None 2023-11-14 15:22:20 UTC

Description Avinash Hanwate 2023-08-02 13:24:06 UTC 
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

https://gitlab.com/procps-ng/procps
Comment 2 Jan Rybar 2023-08-02 16:08:05 UTC 
So far nobody knows nothing, not even the upstream and the reporter hasn't sent any analysis yet, so there is no information on where the issue is and how it can be fixed.  
https://gitlab.com/procps-ng/procps/-/issues/297#note_1496932093
Comment 5 msiddiqu 2023-08-08 20:25:30 UTC 
Created procps-ng tracking bugs for this issue:

Affects: fedora-all [bug 2230186]
Comment 6 errata-xmlrpc 2023-11-07 08:22:40 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:6705 https://access.redhat.com/errata/RHSA-2023:6705
Comment 7 errata-xmlrpc 2023-11-14 15:22:18 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:7187 https://access.redhat.com/errata/RHSA-2023:7187
Comment 9 TEJ RATHI 2023-12-15 11:52:21 UTC 
References:
https://www.freelists.org/post/procps/ps-buffer-overflow-CVE-20234016
https://gitlab.com/procps-ng/procps/-/issues/297

Upstream Commit:
https://gitlab.com/procps-ng/procps/-/commit/2c933ecba3bb1d3041a5a7a53a7b4078a6003413
Note You need to log in before you can comment on or make changes to this bug.