← CVE Radar
CVE-2018-14634Linux Kernel Integer Overflow Vulnerability
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
7.8 HIGHEPSS 14.68%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.0redhat (CNA) | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2018-14634
- Status
- Published
- Assigner (CNA)
- redhat
- Published
- Sep 25, 2018
- Last modified
- 2026-01-27 13:34 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
The Linux Foundationkernel1 version range
- 2.6.x, 3.10.x, 4.14.x
References
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3540
- security.netapp.com https://security.netapp.com/advisory/ntap-20190204-0002/
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:2925
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3591
- exploit-db.com https://www.exploit-db.com/exploits/45516/
- usn.ubuntu.com https://usn.ubuntu.com/3775-1/
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:2933
- usn.ubuntu.com https://usn.ubuntu.com/3779-1/
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:2748
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3590
- usn.ubuntu.com https://usn.ubuntu.com/3775-2/
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:2763
- securityfocus.com http://www.securityfocus.com/bid/105407
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:2924
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3586
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3643
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:2846
- openwall.com https://www.openwall.com/lists/oss-security/2018/09/25/4
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634
- support.f5.com https://support.f5.com/csp/article/K20934447?utm_source=f5support&%3Butm_medium=RSS
- security.paloaltonetworks.com https://security.paloaltonetworks.com/CVE-2018-14634
- openwall.com http://www.openwall.com/lists/oss-security/2021/07/20/2
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS