CWE Code: 190
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Integer Overflow or Wraparound
Summary: an integer overflow flaw was found in the linux kernel's create_elf_tables() function. an unprivileged local user with access to suid (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-09-25
Last Modified Date: 2019-03-21