peter bassill · operator
$ cve CVE-2018-1120 JSON

CVE-2018-1120 EXPLOIT

2.8
LOW · CVSS 3.0 · EPSS 7.2% (pctl 94)

Patch early

A public exploit exists.

Description

A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).

Scoring

CVSS2.8 (LOW, v3.0)
VectorCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
EPSS7.2% — more likely to be exploited than 94% of all CVEs
WeaknessCWE-122
On CISA KEVno
Public exploityes
Published2018-06-20
Last modified2026-06-17

Affected (7)

VendorProduct
canonicalubuntu linux
debiandebian linux
linuxlinux kernel
redhatenterprise linux desktop
redhatenterprise linux server
redhatenterprise linux workstation
redhatvirtualization host

Public exploits

SourceTitleDate
exploit-dbProcps-ng - Multiple Vulnerabilities2018-05-30

References

→ the Explorer  ·  watch your stack  ·  NVD