An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
History
No history.
Information
Published : 2018-09-25 21:29
Updated : 2026-06-17 01:41
NVD link : CVE-2018-14634
Mitre link : CVE-2018-14634
CVE.ORG link : CVE-2018-14634
JSON object : View
Products Affected
f5
- big-ip_fraud_protection_service
- big-ip_application_security_manager
- big-iq_cloud_and_orchestration
- iworkflow
- big-iq_centralized_management
- big-ip_application_acceleration_manager
- enterprise_manager
- big-ip_policy_enforcement_manager
- big-ip_local_traffic_manager
- big-ip_webaccelerator
- big-ip_access_policy_manager
- big-ip_domain_name_system
- big-ip_edge_gateway
- big-ip_global_traffic_manager
- traffix_signaling_delivery_controller
- big-ip_advanced_firewall_manager
- big-ip_link_controller
- big-ip_analytics
linux
- linux_kernel
redhat
- enterprise_linux_desktop
- enterprise_linux_workstation
- enterprise_linux_server_eus
- enterprise_linux_server_tus
- enterprise_linux_server_aus
- enterprise_linux_server
paloaltonetworks
- pan-os
netapp
- snapprotect
canonical
- ubuntu_linux
CWE
CWE-190
Integer Overflow or Wraparound
