CVE-2018-1122

HIGHScheduled

Published:May 23, 2018(8 years ago)

Modified:Nov 21, 2024

Local AccessLow Complexity

Vulnerability Description

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the config_file() function.

Attack Characteristics

Local AccessLow ComplexityLow PrivilegesUser Interaction Required

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
procps-ng_project	procps-ng	3.3.15	-
canonical	ubuntu_linux	-	-
canonical	ubuntu_linux

Timeline

Published
CVE disclosed publicly
May 23, 20188 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20262 months ago

References

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058....
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059....
http://seclists.org/oss-sec/2018/q2/122Mailing List
http://www.securityfocus.com/bid/104214Third Party Advisory

CVSS Score

v3.1

7.3/ 10.0

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

At a Glance

Affected Products

References

procps-ng_project / procps-ng

https://access.redhat.com/errata/RHSA-2019:2189

https://access.redhat.com/errata/RHSA-2020:0595

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1122Issue Tracking

https://lists.debian.org/debian-lts-announce/2018/05/msg00021.htmlThird Party Advisory

https://security.gentoo.org/glsa/201805-14Third Party Advisory

https://usn.ubuntu.com/3658-1/Third Party Advisory

https://usn.ubuntu.com/3658-3/Third Party Advisory

https://www.debian.org/security/2018/dsa-4208Third Party Advisory

https://www.exploit-db.com/exploits/44806/Exploit

https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txtExploit

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058....

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059....

http://seclists.org/oss-sec/2018/q2/122Mailing List

http://www.securityfocus.com/bid/104214Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2189

https://access.redhat.com/errata/RHSA-2020:0595

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1122Issue Tracking

https://lists.debian.org/debian-lts-announce/2018/05/msg00021.htmlThird Party Advisory

https://security.gentoo.org/glsa/201805-14Third Party Advisory

https://usn.ubuntu.com/3658-1/Third Party Advisory

https://usn.ubuntu.com/3658-3/Third Party Advisory

https://www.debian.org/security/2018/dsa-4208Third Party Advisory

https://www.exploit-db.com/exploits/44806/Exploit

https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txtExploit

CVSS v3 Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionRequired

Impact

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

Impact Analysis

ConfidentialityHigh

NoneLowHigh

IntegrityHigh

NoneLowHigh

AvailabilityHigh

NoneLowHigh

CVE-2018-1122

✦ Vulnerability Description

Attack Characteristics

Affected Software

Timeline

References

CVSS Score

At a Glance

Official Sources

CVSS v3 Vector

Impact Analysis

Vulnerability Description