جزئیات آسیب‌پذیری

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

• https://access.redhat.com/errata/RHSA-2018:3540 vendor-advisoryx_refsource_REDHAT
• https://security.netapp.com/advisory/ntap-20190204-0002/ x_refsource_CONFIRM
• https://access.redhat.com/errata/RHSA-2018:2925 vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/errata/RHSA-2018:3591 vendor-advisoryx_refsource_REDHAT
• https://www.exploit-db.com/exploits/45516/ exploitx_refsource_EXPLOIT-DB
• https://usn.ubuntu.com/3775-1/ vendor-advisoryx_refsource_UBUNTU
• https://access.redhat.com/errata/RHSA-2018:2933 vendor-advisoryx_refsource_REDHAT
• https://usn.ubuntu.com/3779-1/ vendor-advisoryx_refsource_UBUNTU
• https://access.redhat.com/errata/RHSA-2018:2748 vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/errata/RHSA-2018:3590 vendor-advisoryx_refsource_REDHAT
• https://usn.ubuntu.com/3775-2/ vendor-advisoryx_refsource_UBUNTU
• https://access.redhat.com/errata/RHSA-2018:2763 vendor-advisoryx_refsource_REDHAT
• http://www.securityfocus.com/bid/105407 vdb-entryx_refsource_BID
• https://access.redhat.com/errata/RHSA-2018:2924 vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/errata/RHSA-2018:3586 vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/errata/RHSA-2018:3643 vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/errata/RHSA-2018:2846 vendor-advisoryx_refsource_REDHAT
• https://www.openwall.com/lists/oss-security/2018/09/25/4 mailing-listx_refsource_MLIST
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634 x_refsource_CONFIRM
• https://support.f5.com/csp/article/K20934447?utm_source=f5support&amp%3Butm_medium=RSS x_refsource_CONFIRM
• https://security.paloaltonetworks.com/CVE-2018-14634 x_refsource_CONFIRM
• http://www.openwall.com/lists/oss-security/2021/07/20/2 mailing-listx_refsource_MLIST
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14634 government-resource