Skip to main content
Apexward Pulse

Linux

Linux Kernel Integer Overflow Vulnerability

CVE-2018-14634

What this means

This is rated high severity (7.8 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Paloaltonetworks Pan Os, f5 Big Ip Access Policy Manager and f5 Big Ip Advanced Firewall Manager, and 25 more are in your estate, and treat that as the priority.

Full vendor description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Scoring and exploitation

7.8/ 10
CVSS 3.0 base scoreHigh

Exploitable only with local access and a low-privilege account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability

Longer bar: easier to attack

Attack vectorLocalAV:L
Attack complexityLowAC:L
Privileges requiredLowPR:L
User interactionNoneUI:N
ScopeUnchangedS:U

Impact

Longer bar: more harm

ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
Elevated attack likelihood (~14.7% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
Exploited in the wild
Yes — confirmed exploitation (US CISA )
Not reported
Listed product
Linux Kernel

Weaknesses

CWE-190

Affected products ()

  • Paloaltonetworks Pan Os
  • f5 Big Ip Access Policy Manager
  • f5 Big Ip Advanced Firewall Manager
  • f5 Big Ip Analytics
  • f5 Big Ip Application Acceleration Manager
  • f5 Big Ip Application Security Manager
  • f5 Big Ip Domain Name System
  • f5 Big Ip Edge Gateway
  • f5 Big Ip Fraud Protection Service
  • f5 Big Ip Global Traffic Manager
  • f5 Big Ip Link Controller
  • f5 Big Ip Local Traffic Manager
  • f5 Big Ip Policy Enforcement Manager
  • f5 Big Ip Webaccelerator
  • f5 Big Iq Centralized Management
  • f5 Big Iq Cloud and Orchestration
  • f5 Enterprise Manager
  • f5 Iworkflow
  • f5 Traffix Signaling Delivery Controller
  • Linux Linux Kernel
  • Redhat Enterprise Linux Desktop
  • Redhat Enterprise Linux Server
  • Redhat Enterprise Linux Server Aus
  • Redhat Enterprise Linux Server Eus
  • Redhat Enterprise Linux Server Tus
  • Redhat Enterprise Linux Workstation
  • Canonical Ubuntu Linux
  • Netapp Snapprotect
Show the raw CPE strings (39)
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:iworkflow:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:*
  • cpe:2.3:a:f5:traffix_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

Showing 25 of 39 matches from .

References

20 links from the CVE record, grouped by site.

Related feed events

  • Linux Kernel Integer Overflow Vulnerability

    Type Vulnerability

    Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to…

    Next step: Confirm whether Linux Kernel is in your estate.

    Who's reporting

    1 of 3 perspectives

    Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal

    Only official coverage so far. Treat as an early signal.

    Linux Kernel
    CVE-2018-14634