CVE-2018-14634

Linux Kernel Integer Overflow Vulnerability

Pan-Os

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

25. Sep 2018

Ausgewertete Quellen

• Red Hat
  https://access.redhat.com/errata/RHSA-2018:2748
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:2763
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:2846
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:2924
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:2925
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:2933
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:3540
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:3586
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:3590
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:3591
• Red Hat
  https://access.redhat.com/errata/RHSA-2018:3643
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634
• Ubuntu
  https://usn.ubuntu.com/3775-1/
• Ubuntu
  https://usn.ubuntu.com/3775-2/
• Ubuntu
  https://usn.ubuntu.com/3779-1/
• Hinweis
  http://www.openwall.com/lists/oss-security/2021/07/20/2
• Hinweis
  http://www.securityfocus.com/bid/105407
• Hinweis
  https://security.netapp.com/advisory/ntap-20190204-0002/
• Hinweis
  https://security.paloaltonetworks.com/CVE-2018-14634
• Hinweis
  https://support.f5.com/csp/article/K20934447?utm_source=f5support&amp%3Butm_medium=RSS
• Hinweis
  https://www.exploit-db.com/exploits/45516/
• Hinweis
  https://www.openwall.com/lists/oss-security/2018/09/25/4
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14634
• CISA
  Linux Kernel Integer Overflow Vulnerability
• NVD
  CVE-2018-14634