Lucene search

K
redhatcveRedhat.comRH:CVE-2018-1126
HistoryOct 05, 2019 - 1:49 p.m.

CVE-2018-1126

2019-10-0513:49:59
redhat.com
access.redhat.com
12

0.005 Low

EPSS

Percentile

77.6%

A flaw was found where procps-ng provides wrappers for standard C allocators that took unsigned int instead of size_t parameters. On platforms where these differ (such as x86_64), this could cause integer truncation, leading to undersized regions being returned to callers that could then be overflowed. The only known exploitable vector for this issue is CVE-2018-1124.