CVE-2014-0196 KEV EXPLOIT
5.5
MEDIUM · CVSS 3.1 · EPSS 22.5% (pctl 98)
Patch first
On CISA KEV — known exploited in the wild, due 2023-06-02.
Description
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
Scoring
| CVSS | 5.5 (MEDIUM, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| EPSS | 22.48% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-362 |
| On CISA KEV | yes — remediate by 2023-06-02 |
| Public exploit | yes |
| Published | 2014-05-07 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | Linux Kernel Race Condition Vulnerability |
|---|---|
| Added | 2023-05-12 |
| Due | 2023-06-02 |
| Vendor / product | Linux / Kernel |
| Ransomware use | none reported |
Affected (30)
| Vendor | Product |
|---|---|
| canonical | ubuntu linux |
| debian | debian linux |
| f5 | big-ip access policy manager |
| f5 | big-ip advanced firewall manager |
| f5 | big-ip analytics |
| f5 | big-ip application acceleration manager |
| f5 | big-ip application security manager |
| f5 | big-ip edge gateway |
| f5 | big-ip global traffic manager |
| f5 | big-ip link controller |
| f5 | big-ip local traffic manager |
| f5 | big-ip policy enforcement manager |
| f5 | big-ip protocol security module |
| f5 | big-ip wan optimization manager |
| f5 | big-ip webaccelerator |
| f5 | big-iq application delivery controller |
| f5 | big-iq centralized management |
| f5 | big-iq cloud |
| f5 | big-iq cloud and orchestration |
| f5 | big-iq device |
| f5 | big-iq security |
| f5 | enterprise manager |
| linux | linux kernel |
| oracle | linux |
| redhat | enterprise linux |
| redhat | enterprise linux eus |
| redhat | enterprise linux server eus |
| suse | suse linux enterprise desktop |
| suse | suse linux enterprise high availability extension |
| suse | suse linux enterprise server |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Linux Kernel 3.14-rc1 < 3.15-rc4 (x64) - Raw Mode PTY Echo Race Condition Privilege Escalation | 2014-05-26 |
References
- http://bugzilla.novell.com/show_bug.cgi?id=875690
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00
- http://linux.oracle.com/errata/ELSA-2014-0771.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
- http://pastebin.com/raw.php?i=yTSFUBgZ
- http://rhn.redhat.com/errata/RHSA-2014-0512.html
- http://secunia.com/advisories/59218
- http://secunia.com/advisories/59262
- http://secunia.com/advisories/59599
- http://source.android.com/security/bulletin/2016-07-01.html
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html
- http://www.debian.org/security/2014/dsa-2926
- http://www.debian.org/security/2014/dsa-2928
- http://www.exploit-db.com/exploits/33516
- http://www.openwall.com/lists/oss-security/2014/05/05/6
- http://www.osvdb.org/106646
- http://www.ubuntu.com/usn/USN-2196-1
- http://www.ubuntu.com/usn/USN-2197-1
- http://www.ubuntu.com/usn/USN-2198-1
→ the Explorer · watch your stack · NVD