CVE-2018-14634
טרם דורגה מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Linux Kernel Integer Overflow Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
תיאור (מקור, אנגלית)
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
מדדים
- EPSS — סבירות ניצול
- 15% (אחוזון 100) נכון ל-25/7/2026
- CWE
- CWE-190
מוצרים מושפעים
paloaltonetworks: pan-os; f5: big-ip access policy manager; f5: big-ip advanced firewall manager; f5: big-ip analytics; f5: big-ip application acceleration manager; f5: big-ip application security manager; f5: big-ip domain name system; f5: big-ip edge gateway; f5: big-ip fraud protection service; f5: big-ip global traffic manager; f5: big-ip link controller; f5: big-ip local traffic manager; f5: big-ip policy enforcement manager; f5: big-ip webaccelerator; f5: big-iq centralized management
קישורים
- https://security.netapp.com/advisory/ntap-20190204-0002/ PatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20190204-0002/ PatchThird Party Advisory
- https://www.exploit-db.com/exploits/45516/ ExploitThird Party AdvisoryVDB Entry
- https://www.openwall.com/lists/oss-security/2018/09/25/4 ExploitMailing ListThird Party Advisory
- https://www.exploit-db.com/exploits/45516/ ExploitThird Party AdvisoryVDB Entry
- https://www.openwall.com/lists/oss-security/2018/09/25/4 ExploitMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/07/20/2 Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/105407 Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:2748 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2763 Third Party Advisory