Bug 2228494 (CVE-2023-4016) - CVE-2023-4016 procps: ps buffer overflow
Summary: CVE-2023-4016 procps: ps buffer overflow
Status: NEW
Alias: CVE-2023-4016
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Nobody
QA Contact:
Depends On: 2228503 2228504 2229182 2229183 2230186
Blocks: 2228501
TreeView+ depends on / blocked
Reported: 2023-08-02 13:24 UTC by Avinash Hanwate
Modified: 2023-12-21 20:28 UTC (History)
6 users (show)

Fixed In Version: procps 4.0.4rc1
Doc Type: If docs needed, set a value
Doc Text:
A heap-based buffer overflow vulnerability was found in the procps project when handling untrusted input with the -C option. This issue may allow a user with "ps" utility access to write unfiltered data into the process heap, triggering an out-of-bounds write, consuming memory and causing a crash, resulting in a denial of service.
Clone Of:
Last Closed:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2023:6705 0 None None None 2023-11-07 08:22:41 UTC
Red Hat Product Errata RHSA-2023:7187 0 None None None 2023-11-14 15:22:20 UTC

Description Avinash Hanwate 2023-08-02 13:24:06 UTC
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.


Comment 2 Jan Rybar 2023-08-02 16:08:05 UTC
So far nobody knows nothing, not even the upstream and the reporter hasn't sent any analysis yet, so there is no information on where the issue is and how it can be fixed.  

Comment 5 msiddiqu 2023-08-08 20:25:30 UTC
Created procps-ng tracking bugs for this issue:

Affects: fedora-all [bug 2230186]

Comment 6 errata-xmlrpc 2023-11-07 08:22:40 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:6705 https://access.redhat.com/errata/RHSA-2023:6705

Comment 7 errata-xmlrpc 2023-11-14 15:22:18 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:7187 https://access.redhat.com/errata/RHSA-2023:7187

Note You need to log in before you can comment on or make changes to this bug.