CVE-2018-14634

Published: Sep 25, 2018Modified: Jan 27, 2026CISA KEV

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Affected (97)

Products: Paloaltonetworks: Pan Os · F5: Big Ip Access Policy Manager, Big Ip Advanced Firewall Manager, Big Ip Analytics, Big Ip Application Acceleration Manager, Big Ip Application Security Manager, Big Ip Domain Name System, Big Ip Edge Gateway, Big Ip Fraud Protection Service, Big Ip Global Traffic Manager, Big Ip Link Controller, Big Ip Local Traffic Manager, Big Ip Policy Enforcement Manager, Big Ip Webaccelerator, Big Iq Centralized Management, Big Iq Cloud And Orchestration, Enterprise Manager, Iworkflow, Traffix Signaling Delivery Controller · Linux: Linux Kernel · +3 more

Show all products

Paloaltonetworks

1 product

Pan Os

18 products

Big Ip Access Policy Manager

Big Ip Advanced Firewall Manager

Big Ip Analytics

Big Ip Application Acceleration Manager

Big Ip Application Security Manager

Big Ip Domain Name System

Big Ip Edge Gateway

Big Ip Fraud Protection Service

Big Ip Global Traffic Manager

Big Ip Link Controller

Big Ip Local Traffic Manager

Big Ip Policy Enforcement Manager

Big Ip Webaccelerator

Big Iq Centralized Management

Big Iq Cloud And Orchestration

Enterprise Manager

Iworkflow

Traffix Signaling Delivery Controller

Linux

1 product

Linux Kernel

Redhat

6 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 7.1.0 to 7.1.23
Paloaltonetworks Pan Os	From 8.0.0 to 8.0.16
Paloaltonetworks Pan Os	From 8.1.0 to 8.1.7

Configuration B

65 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Access Policy Manager	From 11.2.1 to 11.6.4
F5 Big Ip Access Policy Manager	From 12.1.0 to 12.1.5
F5 Big Ip Access Policy Manager	From 13.0.0 to 13.1.1.5
F5 Big Ip Access Policy Manager	From 14.0.0 to 14.0.1.1
F5 Big Ip Access Policy Manager	From 14.1.0 to 14.1.0.6
F5 Big Ip Advanced Firewall Manager	From 11.2.1 to 11.6.4
F5 Big Ip Advanced Firewall Manager	From 12.1.0 to 12.1.5
F5 Big Ip Advanced Firewall Manager	From 13.0.0 to 13.1.1.5
F5 Big Ip Advanced Firewall Manager	From 14.0.0 to 14.0.1.1
F5 Big Ip Advanced Firewall Manager	From 14.1.0 to 14.1.0.6
F5 Big Ip Analytics	From 11.2.1 to 11.6.4
F5 Big Ip Analytics	From 12.1.0 to 12.1.5
F5 Big Ip Analytics	From 13.0.0 to 13.1.1.5
F5 Big Ip Analytics	From 14.0.0 to 14.0.1.1
F5 Big Ip Analytics	From 14.1.0 to 14.1.0.6
F5 Big Ip Application Acceleration Manager	From 11.2.1 to 11.6.4
F5 Big Ip Application Acceleration Manager	From 12.1.0 to 12.1.5
F5 Big Ip Application Acceleration Manager	From 13.0.0 to 13.1.1.5
F5 Big Ip Application Acceleration Manager	From 14.0.0 to 14.0.1.1
F5 Big Ip Application Acceleration Manager	From 14.1.0 to 14.1.0.6
F5 Big Ip Application Security Manager	From 11.2.1 to 11.6.4
F5 Big Ip Application Security Manager	From 12.1.0 to 12.1.5
F5 Big Ip Application Security Manager	From 13.0.0 to 13.1.1.5
F5 Big Ip Application Security Manager	From 14.0.0 to 14.0.1.1
F5 Big Ip Application Security Manager	From 14.1.0 to 14.1.0.6
F5 Big Ip Domain Name System	From 11.2.1 to 11.6.4
F5 Big Ip Domain Name System	From 12.1.0 to 12.1.5
F5 Big Ip Domain Name System	From 13.0.0 to 13.1.1.5
F5 Big Ip Domain Name System	From 14.0.0 to 14.0.1.1
F5 Big Ip Domain Name System	From 14.1.0 to 14.1.0.6
F5 Big Ip Edge Gateway	From 11.2.1 to 11.6.4
F5 Big Ip Edge Gateway	From 12.1.0 to 12.1.5
F5 Big Ip Edge Gateway	From 13.0.0 to 13.1.1.5
F5 Big Ip Edge Gateway	From 14.0.0 to 14.0.1.1
F5 Big Ip Edge Gateway	From 14.1.0 to 14.1.0.6
F5 Big Ip Fraud Protection Service	From 11.2.1 to 11.6.4
F5 Big Ip Fraud Protection Service	From 12.1.0 to 12.1.5
F5 Big Ip Fraud Protection Service	From 13.0.0 to 13.1.1.5
F5 Big Ip Fraud Protection Service	From 14.0.0 to 14.0.1.1
F5 Big Ip Fraud Protection Service	From 14.1.0 to 14.1.0.6
F5 Big Ip Global Traffic Manager	From 11.2.1 to 11.6.4
F5 Big Ip Global Traffic Manager	From 12.1.0 to 12.1.5
F5 Big Ip Global Traffic Manager	From 13.0.0 to 13.1.1.5
F5 Big Ip Global Traffic Manager	From 14.0.0 to 14.0.1.1
F5 Big Ip Global Traffic Manager	From 14.1.0 to 14.1.0.6
F5 Big Ip Link Controller	From 11.2.1 to 11.6.4
F5 Big Ip Link Controller	From 12.1.0 to 12.1.5
F5 Big Ip Link Controller	From 13.0.0 to 13.1.1.5
F5 Big Ip Link Controller	From 14.0.0 to 14.0.1.1
F5 Big Ip Link Controller	From 14.1.0 to 14.1.0.6
F5 Big Ip Local Traffic Manager	From 11.2.1 to 11.6.4
F5 Big Ip Local Traffic Manager	From 12.1.0 to 12.1.5
F5 Big Ip Local Traffic Manager	From 13.0.0 to 13.1.1.5
F5 Big Ip Local Traffic Manager	From 14.0.0 to 14.0.1.1
F5 Big Ip Local Traffic Manager	From 14.1.0 to 14.1.0.6
F5 Big Ip Policy Enforcement Manager	From 11.2.1 to 11.6.4
F5 Big Ip Policy Enforcement Manager	From 12.1.0 to 12.1.5
F5 Big Ip Policy Enforcement Manager	From 13.0.0 to 13.1.1.5
F5 Big Ip Policy Enforcement Manager	From 14.0.0 to 14.0.1.1
F5 Big Ip Policy Enforcement Manager	From 14.1.0 to 14.1.0.6
F5 Big Ip Webaccelerator	From 11.2.1 to 11.6.4
F5 Big Ip Webaccelerator	From 12.1.0 to 12.1.5
F5 Big Ip Webaccelerator	From 13.0.0 to 13.1.1.5
F5 Big Ip Webaccelerator	From 14.0.0 to 14.0.1.1
F5 Big Ip Webaccelerator	From 14.1.0 to 14.1.0.6

Configuration C

9 vulnerable

Vulnerable Software	Affected Versions
F5 Big Iq Centralized Management	From 5.0.0 to 5.4.0
F5 Big Iq Centralized Management	From 6.0.0 to 6.0.1
F5 Big Iq Centralized Management	From 7.0.0 to 7.1.0
F5 Big Iq Centralized Management	Version 4.6.0
F5 Big Iq Cloud And Orchestration	Version 1.0.0
F5 Enterprise Manager	Version 3.1.1
F5 Iworkflow	From 2.2.0 to 2.3.0
F5 Traffix Signaling Delivery Controller	From 5.0.0 to 5.1.0
F5 Traffix Signaling Delivery Controller	Version 4.4.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.0 to 2.6.39.4
Linux Linux Kernel	From 3.10 to 3.10.102
Linux Linux Kernel	From 4.14 to 4.14.54

Configuration E

14 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 6.5
Redhat Enterprise Linux Server Aus	Version 6.6
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Eus	Version 6.7
Redhat Enterprise Linux Server Eus	Version 7.5
Redhat Enterprise Linux Server Eus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 6.6
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Snapprotect	All versions

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (45)

http://www.openwall.com/lists/oss-security/2021/07/20/2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/105407

Source: secalert@redhat.com

Third Party AdvisoryVDB EntryBroken Link

https://access.redhat.com/errata/RHSA-2018:2748

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2763

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2846

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2924

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2925

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2933

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3540

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3586

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3590

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3591

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3643

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://security.netapp.com/advisory/ntap-20190204-0002/

Source: secalert@redhat.com

PatchThird Party Advisory

https://security.paloaltonetworks.com/CVE-2018-14634

Source: secalert@redhat.com

Third Party Advisory

https://support.f5.com/csp/article/K20934447?utm_source=f5support&amp%3Butm_medium=RSS

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/3775-1/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/3775-2/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/3779-1/

Source: secalert@redhat.com

Third Party Advisory

https://www.exploit-db.com/exploits/45516/

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

https://www.openwall.com/lists/oss-security/2018/09/25/4

Source: secalert@redhat.com

ExploitMailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/07/20/2