7.8

CVE-2018-14634

Warnung
Exploit
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Paloaltonetworks ≫ Pan-os Version >= 7.1.0 < 7.1.23
Paloaltonetworks ≫ Pan-os Version >= 8.0.0 < 8.0.16
Paloaltonetworks ≫ Pan-os Version >= 8.1.0 < 8.1.7
F5 ≫ Big-ip Access Policy Manager Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Access Policy Manager Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Access Policy Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Access Policy Manager Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Analytics Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Analytics Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Analytics Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Analytics Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Analytics Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Application Acceleration Manager Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Application Acceleration Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Application Acceleration Manager Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Application Security Manager Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Application Security Manager Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Application Security Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Application Security Manager Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Domain Name System Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Domain Name System Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Domain Name System Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Domain Name System Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Domain Name System Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Edge Gateway Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Edge Gateway Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Edge Gateway Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Edge Gateway Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Edge Gateway Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Fraud Protection Service Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Fraud Protection Service Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Fraud Protection Service Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Fraud Protection Service Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Fraud Protection Service Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Global Traffic Manager Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Global Traffic Manager Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Global Traffic Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Global Traffic Manager Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Link Controller Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Link Controller Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Link Controller Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Link Controller Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Link Controller Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Local Traffic Manager Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Local Traffic Manager Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Local Traffic Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Local Traffic Manager Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-ip Webaccelerator Version >= 11.2.1 < 11.6.4
F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Webaccelerator Version >= 13.0.0 < 13.1.1.5
F5 ≫ Big-ip Webaccelerator Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Webaccelerator Version >= 14.1.0 < 14.1.0.6
F5 ≫ Big-iq Centralized Management Version >= 5.0.0 <= 5.4.0
F5 ≫ Big-iq Centralized Management Version >= 6.0.0 <= 6.0.1
F5 ≫ Big-iq Centralized Management Version >= 7.0.0 <= 7.1.0
F5 ≫ Enterprise Manager Version3.1.1
F5 ≫ Iworkflow Version >= 2.2.0 <= 2.3.0
F5 ≫ Traffix Signaling Delivery Controller Version >= 5.0.0 <= 5.1.0
Linux ≫ Linux Kernel Version >= 2.6.0 <= 2.6.39.4
Linux ≫ Linux Kernel Version >= 3.10 <= 3.10.102
Linux ≫ Linux Kernel Version >= 4.14 <= 4.14.54
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Netapp ≫ Snapprotect Version-

26.01.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog

Linux Kernel Integer Overflow Vulnerability

Schwachstelle

Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.53% 0.934
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
secalert@redhat.com 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://usn.ubuntu.com/3775-1/
Third Party Advisory
https://usn.ubuntu.com/3775-2/
Third Party Advisory
https://usn.ubuntu.com/3779-1/
Third Party Advisory
http://www.securityfocus.com/bid/105407
Third Party Advisory
Broken Link
VDB Entry
https://www.exploit-db.com/exploits/45516/
Third Party Advisory
Exploit
VDB Entry
https://www.openwall.com/lists/oss-security/2018/09/25/4
Third Party Advisory
Exploit
Mailing List