Findings

CVE-2023-4016

Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered…

Published Aug 2, 2023 · updated Oct 14, 2026 · Linux Linux Kernal

Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 2, 2023 · NIST NVD

    Detected

    Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

Affected

  • cpe fedoraproject/fedora38
  • cpe procps project/procpsversion unspecified
  • vendor Linux Linux Kernalversion unspecified

Sources

  • CIRCL Vulnerability LookupVulnerability recordCVE-2023-4016

    Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

    vulnerability.circl.lu
  • CVE.orgVulnerability recordCVE-2023-4016

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-4016

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDVulnerability recordCVE-2023-4016

    Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.

    nvd.nist.gov

References