Bug 2228494 (CVE-2023-4016) - CVE-2023-4016 procps: ps buffer overflow
Summary: CVE-2023-4016 procps: ps buffer overflow
Keywords:
Status: NEW
Alias: CVE-2023-4016
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2228503 2228504 2229182 2229183 2230186
Blocks: 2228501
TreeView+ depends on / blocked
 
Reported: 2023-08-02 13:24 UTC by Avinash Hanwate
Modified: 2023-08-08 20:25 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Avinash Hanwate 2023-08-02 13:24:06 UTC 
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

https://gitlab.com/procps-ng/procps
Comment 2 Jan Rybar 2023-08-02 16:08:05 UTC 
So far nobody knows nothing, not even the upstream and the reporter hasn't sent any analysis yet, so there is no information on where the issue is and how it can be fixed.  
https://gitlab.com/procps-ng/procps/-/issues/297#note_1496932093
Comment 5 msiddiqu 2023-08-08 20:25:30 UTC 
Created procps-ng tracking bugs for this issue:

Affects: fedora-all [bug 2230186]
Note You need to log in before you can comment on or make changes to this bug.