← CVE Radar
CVE-2014-0196Linux Kernel Race Condition Vulnerability
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
5.5 MEDIUMEPSS 20.32%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.5 | MEDIUM | 3.1CISA-ADP | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| 6.9 | MEDIUM | 2.0NVD | AV:L/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jun 2, 2023
The impacted product is end-of-life and should be disconnected if still in use.
Details
- CVE ID
- CVE-2014-0196
- Status
- Analyzed
- Assigner (CNA)
- redhat
- Published
- May 7, 2014
- Last modified
- 2026-06-17 00:02 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
linuxlinux kernel13 version ranges
- 2.6.31 before 3.2.59
- 3.3 before 3.4.91
- 3.5 before 3.10.40
- 3.11 before 3.12.20
- 3.13 before 3.14.4
- 2.6.31
- 2.6.31 rc3
- 2.6.31 rc4
- 2.6.31 rc5
- 2.6.31 rc6
- 2.6.31 rc7
- 2.6.31 rc8
- 2.6.31 rc9
debiandebian linux2 version ranges
- 6.0
- 7.0
redhatenterprise linux1 version range
- 6.0
redhatenterprise linux eus2 version ranges
- 6.3
- 6.4
redhatenterprise linux server eus1 version range
- 6.3
susesuse linux enterprise desktop1 version range
- 11 sp3
susesuse linux enterprise high availability extension1 version range
- 11 sp3
susesuse linux enterprise server1 version range
- 11 sp3
oraclelinux1 version range
- 6
canonicalubuntu linux5 version ranges
- 10.04
- 12.04
- 12.10
- 13.10
- 14.04
f5big-ip access policy manager1 version range
- 11.1.0 through 11.5.1
f5big-ip advanced firewall manager1 version range
- 11.3.0 through 11.5.1
f5big-ip analytics1 version range
- 11.1.0 through 11.5.1
f5big-ip application acceleration manager1 version range
- 11.4.0 through 11.5.1
f5big-ip application security manager1 version range
- 11.1.0 through 11.5.1
f5big-ip edge gateway1 version range
- 11.1.0 through 11.3.0
f5big-ip global traffic manager1 version range
- 11.1.0 through 11.5.1
f5big-ip link controller1 version range
- 11.1.0 through 11.5.1
f5big-ip local traffic manager1 version range
- 11.1.0 through 11.5.1
f5big-ip policy enforcement manager1 version range
- 11.3.0 through 11.5.1
f5big-ip protocol security module1 version range
- 11.1.0 through 11.4.1
f5big-ip wan optimization manager1 version range
- 11.1.0 through 11.3.0
f5big-ip webaccelerator1 version range
- 11.1.0 through 11.3.0
f5big-iq application delivery controller1 version range
- 4.5.0
f5big-iq centralized management1 version range
- 4.6.0
f5big-iq cloud1 version range
- 4.0.0 through 4.5.0
f5big-iq cloud and orchestration1 version range
- 1.0.0
f5big-iq device1 version range
- 4.2.0 through 4.5.0
f5big-iq security1 version range
- 4.0.0 through 4.5.0
f5enterprise manager2 version ranges
- 3.1.0
- 3.1.1
References
- bugzilla.novell.com http://bugzilla.novell.com/show_bug.cgi?id=875690
- git.kernel.org http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00
- linux.oracle.com http://linux.oracle.com/errata/ELSA-2014-0771.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
- pastebin.com http://pastebin.com/raw.php?i=yTSFUBgZ
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2014-0512.html
- secunia.com http://secunia.com/advisories/59218
- secunia.com http://secunia.com/advisories/59262
- secunia.com http://secunia.com/advisories/59599
- source.android.com http://source.android.com/security/bulletin/2016-07-01.html
- support.f5.com http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html
- debian.org http://www.debian.org/security/2014/dsa-2926
- debian.org http://www.debian.org/security/2014/dsa-2928
- exploit-db.com http://www.exploit-db.com/exploits/33516
- openwall.com http://www.openwall.com/lists/oss-security/2014/05/05/6
- osvdb.org http://www.osvdb.org/106646
- ubuntu.com http://www.ubuntu.com/usn/USN-2196-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2197-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2198-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2199-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2200-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2201-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2202-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2203-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2204-1
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1094232
- github.com https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0196