Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

References

https://www.openwall.com/lists/oss-security/2018/09/25/4

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634

https://access.redhat.com/errata/RHSA-2018:2763

https://access.redhat.com/errata/RHSA-2018:2748

http://www.securityfocus.com/bid/105407

https://www.exploit-db.com/exploits/45516/

https://usn.ubuntu.com/3775-2/

https://usn.ubuntu.com/3779-1/

https://usn.ubuntu.com/3775-1/

https://access.redhat.com/errata/RHSA-2018:2846

https://access.redhat.com/errata/RHSA-2018:2933

https://access.redhat.com/errata/RHSA-2018:2925

https://access.redhat.com/errata/RHSA-2018:2924

https://access.redhat.com/errata/RHSA-2018:3591

https://access.redhat.com/errata/RHSA-2018:3590

https://access.redhat.com/errata/RHSA-2018:3586

https://access.redhat.com/errata/RHSA-2018:3540

https://access.redhat.com/errata/RHSA-2018:3643

https://security.netapp.com/advisory/ntap-20190204-0002/

https://support.f5.com/csp/article/K20934447?utm_source=f5support&utm_medium=RSS

https://security.paloaltonetworks.com/CVE-2018-14634

Details

Risk Information

CVSS v2

CVSS v3