CVE-2018-14634

high

Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

References

https://usn.ubuntu.com/3779-1/

https://usn.ubuntu.com/3775-2/

https://usn.ubuntu.com/3775-1/

https://security.netapp.com/advisory/ntap-20190204-0002/

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634

https://access.redhat.com/errata/RHSA-2018:3643

https://access.redhat.com/errata/RHSA-2018:3591

https://access.redhat.com/errata/RHSA-2018:3590

https://access.redhat.com/errata/RHSA-2018:3586

https://access.redhat.com/errata/RHSA-2018:3540

https://access.redhat.com/errata/RHSA-2018:2933

https://access.redhat.com/errata/RHSA-2018:2925

https://access.redhat.com/errata/RHSA-2018:2924

https://access.redhat.com/errata/RHSA-2018:2846

https://access.redhat.com/errata/RHSA-2018:2763

https://access.redhat.com/errata/RHSA-2018:2748

http://www.securityfocus.com/bid/105407

https://www.exploit-db.com/exploits/45516/

https://www.openwall.com/lists/oss-security/2018/09/25/4

https://support.f5.com/csp/article/K20934447?utm_source=f5support&amp%3Butm_medium=RSS

https://security.paloaltonetworks.com/CVE-2018-14634

http://www.openwall.com/lists/oss-security/2021/07/20/2

Details

Source: Mitre, NVD

Published: 2018-09-25

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.02964