VDB
GSD-2018-14634
GSD-2018-14634
PUBLISHED
CVSS 7.800000190734863 HIGH
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
Risk Scores
CVSS 3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| The Linux Foundation | kernel | * |
Timeline
- Sep 6, 2011 CVE Published
- Sep 27, 2018 PoC Published
- Oct 1, 2018 PoC Published
- Jan 27, 2026 PoC Published
- Jan 27, 2026 PoC Published
- Jan 27, 2026 PoC Published
- Jan 27, 2026 PoC Published
- Feb 2, 2026 PoC Published
- Feb 2, 2026 PoC Published
- Feb 2, 2026 PoC Published
- Feb 2, 2026 PoC Published
- Feb 15, 2026 PoC Published
References
- https://security.netapp.com/advisory/ntap-20190204-0002/ url
- 105407 vdb
- [oss-security] 20180925 Integer overflow in Linux's create_elf_tables() (CVE-2018-14634) mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634 url
- https://support.f5.com/csp/article/K20934447?utm_source=f5support&%3Butm_medium=RSS url
- https://security.paloaltonetworks.com/CVE-2018-14634 url
- [oss-security] 20210720 CVE-2021-33910: Denial of service (stack exhaustion) in systemd (PID 1) mailing-list
- RHSA-2018:3540 advisory
- RHSA-2018:2925 advisory
- RHSA-2018:3591 advisory
- 45516 exploit
- USN-3775-1 advisory
- RHSA-2018:2933 advisory
- USN-3779-1 advisory
- RHSA-2018:2748 advisory
- RHSA-2018:3590 advisory
- USN-3775-2 advisory
- RHSA-2018:2763 advisory
- RHSA-2018:2924 advisory
- RHSA-2018:3586 advisory
…and 3 more