CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2018-146347.2/HIGHEPSS 14.7%CISA KEV
2018-09-25

Linux Kernel create_elf_tables() Integer Overflow Local Privilege Escalation Vulnerability (CVE-2018-14634, Mutagen Astronomer)

[Affected Scope] Linux kernel versions 2.6.x, 3.10.x, and 4.14.x, primarily affecting Red Hat Enterprise Linux and derivative distributions.

[Impact] An unprivileged local attacker can exploit this vulnerability via SUID binaries to trigger an integer overflow, achieving full root-level privilege escalation.

[Mitigation] Apply the official vendor kernel patches immediately and reboot the system, or implement temporary SUID restrictions and SystemTap mitigations.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse