Mutagen Astronomy vulnerability tracked as CVE-2018-14634, is a type of a local privilege escalation issue Discoverd by Qualys —and exists in the Linux kernel's create_elf_tables() function that operates the memory tables.
IMPACT :
To successfully exploit this vulnerability, attackers need to have access to the targeted system and run their exploit that leads to a buffer overflow, thereby resulting in the execution of malicious code and achieving complete control of the affected system.
Affected Systems:
1. This security vulnerability can be exploited to escalate privileges to root via a SUID-root binary, but it only works on 64-bit systems.
2. Affects the kernel versions released between July 2007 and July 2017, impacting the Red Hat Enterprise Linux, CentOS, and Debian distributions.
Exploit:
Qualys researchers have also released both technical details and proof-of-concept (PoC) exploits (Exploit 1, Exploit 2) for the vulnerability to the public.
IMPACT :
To successfully exploit this vulnerability, attackers need to have access to the targeted system and run their exploit that leads to a buffer overflow, thereby resulting in the execution of malicious code and achieving complete control of the affected system.
Affected Systems:
1. This security vulnerability can be exploited to escalate privileges to root via a SUID-root binary, but it only works on 64-bit systems.
2. Affects the kernel versions released between July 2007 and July 2017, impacting the Red Hat Enterprise Linux, CentOS, and Debian distributions.
Exploit:
Qualys researchers have also released both technical details and proof-of-concept (PoC) exploits (Exploit 1, Exploit 2) for the vulnerability to the public.
No comments:
Post a Comment