CVE-2018-14634

HIGH

Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

References

http://www.securityfocus.com/bid/105407

https://access.redhat.com/errata/RHSA-2018:2748

https://access.redhat.com/errata/RHSA-2018:2763

https://access.redhat.com/errata/RHSA-2018:2846

https://access.redhat.com/errata/RHSA-2018:2924

https://access.redhat.com/errata/RHSA-2018:2925

https://access.redhat.com/errata/RHSA-2018:2933

https://access.redhat.com/errata/RHSA-2018:3540

https://access.redhat.com/errata/RHSA-2018:3586

https://access.redhat.com/errata/RHSA-2018:3590

https://access.redhat.com/errata/RHSA-2018:3591

https://access.redhat.com/errata/RHSA-2018:3643

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634

https://security.netapp.com/advisory/ntap-20190204-0002/

https://securityadvisories.paloaltonetworks.com/Home/Detail/143

https://support.f5.com/csp/article/K20934447?utm_source=f5support&utm_medium=RSS

https://usn.ubuntu.com/3775-1/

https://usn.ubuntu.com/3775-2/

https://usn.ubuntu.com/3779-1/

https://www.exploit-db.com/exploits/45516/

https://www.openwall.com/lists/oss-security/2018/09/25/4

Details

Source: MITRE

Published: 2018-09-25

Updated: 2019-03-21

Type: CWE-190

Risk Information

CVSS v2.0

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH

CVSS v3.0

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from 2.6.0 to 2.6.39.4 (inclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from 3.10.0 to 3.10.102 (inclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from 4.14.0 to 4.14.54 (inclusive)

Configuration 2

OR

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 3

OR

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Configuration 4

OR

cpe:2.3:a:netapp:active_iq_performance_analytics_services:-:*:*:*:*:*:*:*

Tenable Plugins

View all (48 total)

IDNameProductFamilySeverity
127408NewStart CGSL MAIN 4.05 : kernel Multiple Vulnerabilities (NS-SA-2019-0143)NessusNewStart CGSL Local Security Checks
critical
127233NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0049)NessusNewStart CGSL Local Security Checks
high
127202NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0034)NessusNewStart CGSL Local Security Checks
high
125101EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1513)NessusHuawei Local Security Checks
critical
124833EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1511)NessusHuawei Local Security Checks
high
123136F5 Networks BIG-IP : Linux kernel vulnerability (K20934447)NessusF5 Networks Local Security Checks
high
123079Palo Alto Networks < 7.1.23 / 8.0.x < 8.0.16 / 8.1.x < 8.1.7 Integer Overflow Vulnerability (PAN-SA-2019-0006)NessusPalo Alto Local Security Checks
high
122611Virtuozzo 7 : OVMF / anaconda / anaconda-core / anaconda-dracut / etc (VZA-2019-013)NessusVirtuozzo Local Security Checks
high
121098Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2018-075)NessusVirtuozzo Local Security Checks
high
121097Virtuozzo 7 : readykernel-patch (VZA-2018-072)NessusVirtuozzo Local Security Checks
high
121068Juniper Junos Space 18.4.x < 18.4R1 Multiple Vulnerabilities (JSA10917)NessusJunos Local Security Checks
high
119899EulerOS Virtualization 2.5.1 : kernel (EulerOS-SA-2018-1410)NessusHuawei Local Security Checks
high
119112RHEL 6 : MRG (RHSA-2018:3586)NessusRed Hat Local Security Checks
high
119075RHEL 6 : kernel (RHSA-2018:3643)NessusRed Hat Local Security Checks
high
119059EulerOS Virtualization 2.5.0 : kernel (EulerOS-SA-2018-1368)NessusHuawei Local Security Checks
high
118948RHEL 7 : kernel (RHSA-2018:3591)NessusRed Hat Local Security Checks
high
118947RHEL 7 : kernel (RHSA-2018:3590)NessusRed Hat Local Security Checks
high
118946RHEL 7 : kernel (RHSA-2018:3540)NessusRed Hat Local Security Checks
high
118756EulerOS 2.0 SP3 : kernel (EulerOS-SA-2018-1362)NessusHuawei Local Security Checks
high
118743EulerOS 2.0 SP2 : kernel (EulerOS-SA-2018-1360)NessusHuawei Local Security Checks
high
118439EulerOS Virtualization 2.5.2 : kernel (EulerOS-SA-2018-1351)NessusHuawei Local Security Checks
high
118223SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3238-1)NessusSuSE Local Security Checks
high
118173SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3171-1)NessusSuSE Local Security Checks
high
118165RHEL 6 : kernel (RHSA-2018:2933)NessusRed Hat Local Security Checks
high
118164RHEL 6 : kernel (RHSA-2018:2925)NessusRed Hat Local Security Checks
high
118163RHEL 6 : kernel (RHSA-2018:2924)NessusRed Hat Local Security Checks
high
118107Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2018-4250)NessusOracle Linux Local Security Checks
high
118057Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20181009)NessusScientific Linux Local Security Checks
high
118055Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4245) (Foreshadow)NessusOracle Linux Local Security Checks
high
118042Amazon Linux 2 : kernel (ALAS-2018-1087)NessusAmazon Linux Local Security Checks
high
118033SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3083-1)NessusSuSE Local Security Checks
high
118028RHEL 6 : kernel (RHSA-2018:2846)NessusRed Hat Local Security Checks
high
118025Oracle Linux 6 : kernel (ELSA-2018-2846)NessusOracle Linux Local Security Checks
high
118018CentOS 6 : kernel (CESA-2018:2846)NessusCentOS Local Security Checks
high
117924Amazon Linux AMI : kernel (ALAS-2018-1087)NessusAmazon Linux Local Security Checks
high
117869Ubuntu 14.04 LTS : linux vulnerabilities (USN-3775-1)NessusUbuntu Local Security Checks
high
117849Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2018-4234)NessusOracle Linux Local Security Checks
high
117848Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4233)NessusOracle Linux Local Security Checks
high
117847Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4230)NessusOracle Linux Local Security Checks
high
117846OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0261)NessusOracleVM Local Security Checks
high
117829CentOS 7 : kernel (CESA-2018:2748)NessusCentOS Local Security Checks
high
117824SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2908-1)NessusSuSE Local Security Checks
high
117823SUSE SLES11 Security Update : kernel (SUSE-SU-2018:2907-1)NessusSuSE Local Security Checks
high
117820SUSE SLES11 Security Update : kernel (SUSE-SU-2018:2879-1)NessusSuSE Local Security Checks
high
117787Scientific Linux Security Update : kernel on SL7.x x86_64 (20180925)NessusScientific Linux Local Security Checks
high
117776RHEL 7 : kernel-rt (RHSA-2018:2763)NessusRed Hat Local Security Checks
high
117773RHEL 7 : kernel (RHSA-2018:2748)NessusRed Hat Local Security Checks
high
117765Oracle Linux 7 : kernel (ELSA-2018-2748)NessusOracle Linux Local Security Checks
high