Logo
›
›component›procps
Name
procps
Version
3.3.17
Type
library
Description
System and process monitoring utilities
Licenses
GPL-2.0-or-later & LGPL-2.0-or-later
PURL
-
CPE
cpe:2.3:*:procps-ng_project:procps-ng:3.3.17:*:*:*:*:*:*:*

Other Versions#

Project
Branch
Version
yocto
master
4.0.6
yocto
scarthgap
4.0.4

Patches#

#
Title
Author
Resolve
1
proc/escape.c: add missing include
Alexander Kanavin <alex.kanavin@gmail.com>
2
top: fix a fix for the 'bye_bye' function (merge #127)
Jim Warner <james.warner@comcast.net>
3
top: replaced one use of fputs(3) with a write(2) call
Shaohua Zhan <shaohua.zhan@windriver.com>
4
ps: Fix possible buffer overflow in -C option
Craig Small <csmall@dropbear.xyz>
CVE-2023-4016
5
w.c: correct musl builds
Alexander Kanavin <alex.kanavin@gmail.com>
6
procps: patch CVE-2023-4016
Jinfeng Wang <jinfeng.wang.cn@windriver.com>
CVE-2023-4016

Vulnerabilities#

Name
Analysis
Description
CVE-2023-4016
Patched
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.