{"cve_id":"CVE-2018-14634","published":"2018-09-25T21:29:00.390000+00:00","last_modified":"2026-06-17T01:41:20.410000+00:00","vuln_status":"Analyzed","description":"An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.","cvss_version":"3.0","cvss_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","base_score":7.8,"base_severity":"HIGH","attack_vector":"LOCAL","privileges_req":"LOW","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-190"],"in_kev":true,"kev_date_added":"2026-01-26","kev_ransomware":false,"epss_score":0.14689,"epss_percentile":0.96668,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"USER","req_vector":"LOCAL","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T08:51:51.091688+00:00","first_seen":"2018-09-25T21:29:00.390000+00:00","kev_first_seen":"2026-01-26T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["canonical","f5","linux","netapp","paloaltonetworks","redhat"],"products":["big-ip_access_policy_manager","big-ip_advanced_firewall_manager","big-ip_analytics","big-ip_application_acceleration_manager","big-ip_application_security_manager","big-ip_domain_name_system","big-ip_edge_gateway","big-ip_fraud_protection_service","big-ip_global_traffic_manager","big-ip_link_controller","big-ip_local_traffic_manager","big-ip_policy_enforcement_manager","big-ip_webaccelerator","big-iq_centralized_management","big-iq_cloud_and_orchestration","enterprise_linux_desktop","enterprise_linux_server","enterprise_linux_server_aus","enterprise_linux_server_eus","enterprise_linux_server_tus","enterprise_linux_workstation","enterprise_manager","iworkflow","linux_kernel","pan-os","snapprotect","traffix_signaling_delivery_controller","ubuntu_linux"],"affected":[{"vendor":"canonical","product":"ubuntu_linux","ranges":["12.04","14.04"]},{"vendor":"f5","product":"big-ip_access_policy_manager","ranges":["≥ 12.1.0 and < 12.1.5","≥ 13.0.0 and < 13.1.1.5","≥ 14.0.0 and < 14.0.1.1","≥ 11.2.1 and < 11.6.4","≥ 14.1.0 and < 14.1.0.6"]},{"vendor":"f5","product":"big-ip_advanced_firewall_manager","ranges":["≥ 14.0.0 and < 14.0.1.1","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6"]},{"vendor":"f5","product":"big-ip_analytics","ranges":["≥ 14.0.0 and < 14.0.1.1","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6"]},{"vendor":"f5","product":"big-ip_application_acceleration_manager","ranges":["≥ 14.0.0 and < 14.0.1.1","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6"]},{"vendor":"f5","product":"big-ip_application_security_manager","ranges":["≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 14.0.0 and < 14.0.1.1"]},{"vendor":"f5","product":"big-ip_domain_name_system","ranges":["≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 14.0.0 and < 14.0.1.1"]},{"vendor":"f5","product":"big-ip_edge_gateway","ranges":["≥ 13.0.0 and < 13.1.1.5","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 14.0.0 and < 14.0.1.1","≥ 14.1.0 and < 14.1.0.6"]},{"vendor":"f5","product":"big-ip_fraud_protection_service","ranges":["≥ 14.0.0 and < 14.0.1.1","≥ 14.1.0 and < 14.1.0.6","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 13.0.0 and < 13.1.1.5"]},{"vendor":"f5","product":"big-ip_global_traffic_manager","ranges":["≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 14.0.0 and < 14.0.1.1"]},{"vendor":"f5","product":"big-ip_link_controller","ranges":["≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 14.0.0 and < 14.0.1.1"]},{"vendor":"f5","product":"big-ip_local_traffic_manager","ranges":["≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 14.0.0 and < 14.0.1.1"]},{"vendor":"f5","product":"big-ip_policy_enforcement_manager","ranges":["≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 14.0.0 and < 14.0.1.1"]},{"vendor":"f5","product":"big-ip_webaccelerator","ranges":["≥ 13.0.0 and < 13.1.1.5","≥ 14.1.0 and < 14.1.0.6","≥ 11.2.1 and < 11.6.4","≥ 12.1.0 and < 12.1.5","≥ 14.0.0 and < 14.0.1.1"]},{"vendor":"f5","product":"big-iq_centralized_management","ranges":["≥ 7.0.0 and ≤ 7.1.0","4.6.0","≥ 5.0.0 and ≤ 5.4.0","≥ 6.0.0 and ≤ 6.0.1"]},{"vendor":"f5","product":"big-iq_cloud_and_orchestration","ranges":["1.0.0"]},{"vendor":"f5","product":"enterprise_manager","ranges":["3.1.1"]},{"vendor":"f5","product":"iworkflow","ranges":["≥ 2.2.0 and ≤ 2.3.0"]},{"vendor":"f5","product":"traffix_signaling_delivery_controller","ranges":["≥ 5.0.0 and ≤ 5.1.0","4.4.0"]},{"vendor":"linux","product":"linux_kernel","ranges":["≥ 2.6.0 and ≤ 2.6.39.4","≥ 3.10 and ≤ 3.10.102","≥ 4.14 and ≤ 4.14.54"]},{"vendor":"netapp","product":"snapprotect","ranges":["all versions"]},{"vendor":"paloaltonetworks","product":"pan-os","ranges":["≥ 7.1.0 and < 7.1.23","≥ 8.1.0 and < 8.1.7","≥ 8.0.0 and < 8.0.16"]},{"vendor":"redhat","product":"enterprise_linux_desktop","ranges":["6.0","7.0"]},{"vendor":"redhat","product":"enterprise_linux_server","ranges":["7.0","6.0"]},{"vendor":"redhat","product":"enterprise_linux_server_aus","ranges":["7.6","6.5","6.6"]},{"vendor":"redhat","product":"enterprise_linux_server_eus","ranges":["6.7","7.5","7.6"]},{"vendor":"redhat","product":"enterprise_linux_server_tus","ranges":["7.6","6.6"]},{"vendor":"redhat","product":"enterprise_linux_workstation","ranges":["7.0","6.0"]}]}