USN-6477-1: procps-ng vulnerability
14 November 2023
procps-ng could be made to crash if it received specially crafted input.
Releases
Packages
- procps - /proc file system utilities
Details
It was discovered that the procps-ng ps tool incorrectly handled memory.
An attacker could possibly use this issue to cause procps-ng to crash,
resulting in a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.10
Ubuntu 23.04
Ubuntu 22.04
Ubuntu 20.04
Ubuntu 18.04
-
procps
-
2:3.3.12-3ubuntu1.2+esm1
Available with Ubuntu Pro
Ubuntu 16.04
-
procps
-
2:3.3.10-4ubuntu2.5+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.