ID:6120 - Exploit for Integer overflow - CVE-2018-14634
Published: June 17, 2021
Vulnerability identifier: #VU15168
Vulnerability risk: Low
CVE-ID: CVE-2018-14634
CWE-ID: CWE-190
Exploitation vector: Local access
Vulnerable software:
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to integer overflow in create_elf_tables() function when processing SUID binaries. A local unprivileged user can use this vulnerability to execute execute arbitrary code on the system with elevated privileges.
Remediation
Install updates from vendor's website.