CVE-2018-14634

HIGHScheduled

Published:Sep 25, 2018(7 years ago)

Modified:Jan 27, 2026

Local AccessNo InteractionLow Complexity

Vulnerability Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Attack Characteristics

Local AccessLow ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
paloaltonetworks	pan-os	7.1.0 - 7.1.23	-
paloaltonetworks	pan-os	8.0.0 - 8.0.16	-
paloaltonetworks	pan-os

Timeline

Published
CVE disclosed publicly
Sep 25, 20187 years ago
Last Modified
Most recent update
Jan 27, 20263 months ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

http://www.openwall.com/lists/oss-security/2021/07/20/2Mailing List
http://www.securityfocus.com/bid/105407Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2748Third Party Advisory

CVSS Score

v3.1

7.8/ 10.0

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

At a Glance

Affected Products

References

paloaltonetworks / pan-os

https://access.redhat.com/errata/RHSA-2018:2763Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2846Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2924Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2925Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2933Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3540Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3586Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3590Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3591Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3643Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634Issue Tracking

https://security.netapp.com/advisory/ntap-20190204-0002/Patch

https://security.paloaltonetworks.com/CVE-2018-14634Third Party Advisory

https://support.f5.com/csp/article/K20934447?utm_source=f5support&amp%...Third Party Advisory

https://usn.ubuntu.com/3775-1/Third Party Advisory

https://usn.ubuntu.com/3775-2/Third Party Advisory

https://usn.ubuntu.com/3779-1/Third Party Advisory

https://www.exploit-db.com/exploits/45516/Exploit

https://www.openwall.com/lists/oss-security/2018/09/25/4Exploit

http://www.openwall.com/lists/oss-security/2021/07/20/2Mailing List

http://www.securityfocus.com/bid/105407Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2748Third Party Advisory