Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2023:6705
HistoryNov 07, 2023 - 12:00 a.m.

Low: procps-ng security and bug fix update

2023-11-0700:00:00
errata.almalinux.org
7
procps-ng
system utilities
ps buffer overflow

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, and pwdx.

Security Fix(es):

  • procps: ps buffer overflow (CVE-2023-4016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9noarchprocps-ng-i18n< 3.3.17-13.el9procps-ng-i18n-3.3.17-13.el9.noarch.rpm
almalinux9i686procps-ng< 3.3.17-13.el9procps-ng-3.3.17-13.el9.i686.rpm
almalinux9x86_64procps-ng< 3.3.17-13.el9procps-ng-3.3.17-13.el9.x86_64.rpm
almalinux9aarch64procps-ng< 3.3.17-13.el9procps-ng-3.3.17-13.el9.aarch64.rpm
almalinux9ppc64leprocps-ng< 3.3.17-13.el9procps-ng-3.3.17-13.el9.ppc64le.rpm
almalinux9s390xprocps-ng< 3.3.17-13.el9procps-ng-3.3.17-13.el9.s390x.rpm
almalinux9i686procps-ng-devel< 3.3.17-13.el9procps-ng-devel-3.3.17-13.el9.i686.rpm
almalinux9ppc64leprocps-ng-devel< 3.3.17-13.el9procps-ng-devel-3.3.17-13.el9.ppc64le.rpm
almalinux9x86_64procps-ng-devel< 3.3.17-13.el9procps-ng-devel-3.3.17-13.el9.x86_64.rpm
almalinux9s390xprocps-ng-devel< 3.3.17-13.el9procps-ng-devel-3.3.17-13.el9.s390x.rpm
Rows per page:
1-10 of 111

Related

ubuntu 1
redos 1
openvas 24
osv 5
nessus 33
debiancve 1
ubuntucve 1
redhat 17
oraclelinux 2
ibm 7
cve 1
alpinelinux 1
rocky 1
nvd 1
almalinux 1
cvelist 1
redhatcve 1
fedora 1
cloudfoundry 1
prion 1
veracode 1
photon 3
hp 1
oracle 1
ics 1
ubuntu
ubuntu
procps-ng vulnerability
2023-11-14 00:00:00
redos
redos
ROS-20231020-03
2023-10-20 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2024-1052)
2024-01-05 00:00:00
openSUSE: Security Advisory for procps (SUSE-SU-2023:3472-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2023-3106)
2023-11-01 00:00:00
osv
osv
Low: procps-ng security update
2023-11-28 22:42:52
CVE-2023-4016
2023-08-02 05:15:09
Low: procps-ng security update
2023-11-14 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : procps-ng (EulerOS-SA-2023-3147)
2024-01-16 00:00:00
EulerOS Virtualization 2.10.1 : procps-ng (EulerOS-SA-2023-3516)
2024-01-16 00:00:00
EulerOS Virtualization 2.9.0 : procps-ng (EulerOS-SA-2024-1026)
2024-01-16 00:00:00
debiancve
debiancve
CVE-2023-4016
2023-08-02 05:15:09
ubuntucve
ubuntucve
CVE-2023-4016
2023-08-02 00:00:00
redhat
redhat
(RHSA-2023:7187) Low: procps-ng security update
2023-11-14 08:47:28
(RHSA-2023:6705) Low: procps-ng security and bug fix update
2023-11-07 06:12:30
(RHSA-2023:7725) Moderate: RHACS 4.3 enhancement and security update
2023-12-11 15:07:43
oraclelinux
oraclelinux
procps-ng security and bug fix update
2023-11-11 00:00:00
procps-ng security update
2023-11-17 00:00:00
ibm
ibm
Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is vulnerable to denial of service due to procps-ng (CVE-2023-4016)
2023-12-04 07:56:26
Security Bulletin: IBM Automation Decision Services - Multiple CVEs addressed (February 2024)
2024-03-11 09:56:22
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from shadow-utils, procps-ng, containerd, urllib3, nghttp2 and Golang
2023-12-15 07:45:06
cve
cve
CVE-2023-4016
2023-08-02 05:15:09
alpinelinux
alpinelinux
CVE-2023-4016
2023-08-02 05:15:09
rocky
rocky
procps-ng security update
2023-11-28 22:42:52
nvd
nvd
CVE-2023-4016
2023-08-02 05:15:09
almalinux
almalinux
Low: procps-ng security update
2023-11-14 00:00:00
cvelist
cvelist
CVE-2023-4016
2023-08-02 04:20:20
redhatcve
redhatcve
CVE-2023-4016
2023-08-08 20:35:14
fedora
fedora
[SECURITY] Fedora 38 Update: procps-ng-3.3.17-11.fc38
2023-08-21 00:59:11
cloudfoundry
cloudfoundry
USN-6477-1: procps-ng vulnerability | Cloud Foundry
2023-12-04 00:00:00
prion
prion
Heap overflow
2023-08-02 05:15:00
veracode
veracode
Denial Of Service (DoS)
2023-08-18 11:29:51
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0196
2024-01-30 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0644
2023-09-06 00:00:00
Moderate Photon OS Security Update - PHSA-2024-4.0-0555
2024-01-23 00:00:00
hp
hp
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON
Related for ALSA-2023:6705
ubuntu1redos1openvas24osv5nessus33debiancve1ubuntucve1redhat17oraclelinux2ibm7cve1alpinelinux1rocky1nvd1almalinux1cvelist1redhatcve1fedora1cloudfoundry1prion1veracode1photon3hp1oracle1ics1