CVE-2018-14634

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Sep 25, 2018
Last modified
Jun 17, 2026
Added to CISA KEV
Jan 26, 2026
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-146356.5When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassiCVE-2018-146365.3Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended CVE-2018-146378.1The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can eCVE-2018-146387.5A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent searCVE-2018-14646.5IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5,CVE-2018-146415.9A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive,CVE-2018-146425.3An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that hanCVE-2018-146439.8An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remoCVE-2018-146445.9An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type likCVE-2018-146457.5A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_iCVE-2018-146465.5The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the CVE-2018-146477.5Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial o