CVEs / CVE-2014-0196
CVE-2014-0196: Linux Kernel Race Condition Vulnerability
- Known exploited in the CISA KEV catalog since 12 May 2023
- medium 6.9 CVSS 2.0 (NVD)
- EPSS 20.3% chance of exploitation in the next 30 days, higher than 97% of CVEs (30 Oct 2026)
- Last changed at its sources
Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.
Check your servers with Stackurity Already using Stackurity? Search for CVE-2014-0196
Summary
Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.
Description
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
Affected and fixed versions
| Product | Affected | Fixed in |
|---|---|---|
| n/a n/a | n/a | — |
Exploitation
| In CISA KEV since | 12 May 2023 |
|---|---|
| Due date for US federal agencies | 2 Jun 2023 |
| Used in ransomware campaigns | Unknown |
| Required action | The impacted product is end-of-life and should be disconnected if still in use. |
Severity
| CVSS 2.0 | 6.9 mediumAV:L/AC:M/Au:N/C:C/I:C/A:CScored by NVD |
|---|---|
| Weakness | CWE-362 |
References
- CVE-2014-0196 on NVD
- CVE-2014-0196 in the CISA KEV catalog
- https://lkml.iu.edu/hypermail/linux/kernel/1609.1/02103.html (cited by CISA)
- CVE-2014-0196 on OSV
- http://bugzilla.novell.com/show_bug.cgi?id=875690 Issue Tracking, Permissions Required, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00 Broken Link
- http://linux.oracle.com/errata/ELSA-2014-0771.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html Mailing List, Third Party Advisory
- http://pastebin.com/raw.php?i=yTSFUBgZ Exploit, Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0512.html Third Party Advisory
- http://secunia.com/advisories/59218 Not Applicable
- http://secunia.com/advisories/59262 Broken Link
- http://secunia.com/advisories/59599 Broken Link
- http://source.android.com/security/bulletin/2016-07-01.html Not Applicable
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html Third Party Advisory
- http://www.debian.org/security/2014/dsa-2926 Third Party Advisory
- http://www.debian.org/security/2014/dsa-2928 Third Party Advisory
- http://www.exploit-db.com/exploits/33516 Exploit, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2014/05/05/6 Mailing List, Third Party Advisory
- http://www.osvdb.org/106646 Broken Link
- http://www.ubuntu.com/usn/USN-2196-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2197-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2198-1 Third Party Advisory
Sources
Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.
This product uses data from the NVD API but is not endorsed or certified by the NVD.