PT-2018-12629 · Linux+5 · Linux Kernel+5

Published 2014-04-02 · Updated 2026-01-29 · CVE-2018-14634

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Alma Linux kernel kernel-rt packages PAN-OS 7.1.22 and earlier PAN-OS 8.0.15 and earlier PAN-OS 8.1.6 and earlier kernel versions 2.6.x, 3.10.x and 4.14.x

Description An integer overflow flaw exists in the Linux kernel's create elf tables() function. Successful exploitation of this issue may allow a local unprivileged user to escalate their privileges on the system. An attacker requires local access and a separate vulnerability allowing arbitrary code execution to fully exploit this issue. The vulnerability affects 64-bit systems with more than 32 GB of available memory.

Recommendations Update the kernel to a newer version. Update PAN-OS to version 9.0 or later.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2014-1422

ALT-PU-2018-1557

ALT-PU-2018-2002

CESA-2018_2748

CESA-2018_2846

CVE-2018-14634

DLA-1529-1

ELSA-2018-2748

ELSA-2018-2846

ELSA-2018-4230

ELSA-2018-4233

ELSA-2018-4234

RHSA-2018:2748

RHSA-2018:2763

RHSA-2018:2846

RHSA-2018:2924

RHSA-2018:2925

RHSA-2018:2933

RHSA-2018:3540

RHSA-2018:3586

RHSA-2018:3590

RHSA-2018:3591

RHSA-2018:3643

RHSA-2018_2748

RHSA-2018_2763

RHSA-2018_2846

SUSE-SU-2018:2879-1

SUSE-SU-2018:2907-1

SUSE-SU-2018:2908-1

SUSE-SU-2018:2908-2

SUSE-SU-2018:3083-1

SUSE-SU-2018:3088-1

SUSE-SU-2018:3171-1

SUSE-SU-2018:3238-1

SUSE-SU-2018_2879-1

SUSE-SU-2018_2907-1

USN-3775-1

USN-3775-2

USN-3779-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 190

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 https://qualys.com/2018/09/25/cve-2018-14634/mutagen-astronomy-integer-overflow-linux-create_elf_tables-cve-2018-14634.txt · Exploit
• 🔥 https://openwall.com/lists/oss-security/2018/09/25/4 · Exploit
• 🔥 https://exploit-db.com/exploits/45516 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2018:3083-1 · Vendor Advisory
• https://usn.ubuntu.com/3779-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2933 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:3591 · Vendor Advisory
• https://usn.ubuntu.com/3775-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-15594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-15572 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2924 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2879-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:3586 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14634 · Security Note