CVE-2014-0196

Published: May 7, 2014Modified: Apr 21, 2026CISA KEV

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Affected (50)

Products: Linux: Linux Kernel · Debian: Debian Linux · Redhat: Enterprise Linux, Enterprise Linux Eus, Enterprise Linux Server Eus · +4 more

Show all products

Linux: Linux Kernel · Debian: Debian Linux · Redhat: Enterprise Linux, Enterprise Linux Eus, Enterprise Linux Server Eus · Suse: Suse Linux Enterprise Desktop, Suse Linux Enterprise High Availability Extension, Suse Linux Enterprise Server · Oracle: Linux · Canonical: Ubuntu Linux · F5: Big Ip Access Policy Manager, Big Ip Advanced Firewall Manager, Big Ip Analytics, Big Ip Application Acceleration Manager, Big Ip Application Security Manager, Big Ip Edge Gateway, Big Ip Global Traffic Manager, Big Ip Link Controller, Big Ip Local Traffic Manager, Big Ip Policy Enforcement Manager, Big Ip Protocol Security Module, Big Ip Wan Optimization Manager, Big Ip Webaccelerator, Big Iq Application Delivery Controller, Big Iq Centralized Management, Big Iq Cloud, Big Iq Cloud And Orchestration, Big Iq Device, Big Iq Security, Enterprise Manager

1 product

1 product

3 products

Enterprise Linux Server Eus

Suse

3 products

Suse Linux Enterprise Desktop

Suse Linux Enterprise High Availability Extension

Suse Linux Enterprise Server

1 product

1 product

20 products

Big Ip Access Policy Manager

Big Ip Advanced Firewall Manager

Big Ip Analytics

Big Ip Application Acceleration Manager

Big Ip Application Security Manager

Big Ip Edge Gateway

Big Ip Global Traffic Manager

Big Ip Link Controller

Big Ip Local Traffic Manager

Big Ip Policy Enforcement Manager

Big Ip Protocol Security Module

Big Ip Wan Optimization Manager

Big Ip Webaccelerator

Big Iq Application Delivery Controller

Big Iq Centralized Management

Big Iq Cloud

Big Iq Cloud And Orchestration

Big Iq Device

Big Iq Security

Enterprise Manager

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	After 2.6.31 to 3.2.59
Linux Linux Kernel	From 3.11 to 3.12.20
Linux Linux Kernel	From 3.13 to 3.14.4
Linux Linux Kernel	From 3.3 to 3.4.91
Linux Linux Kernel	From 3.5 to 3.10.40
Linux Linux Kernel	Version 2.6.31
Linux Linux Kernel	Version 2.6.31 rc3
Linux Linux Kernel	Version 2.6.31 rc4
Linux Linux Kernel	Version 2.6.31 rc5
Linux Linux Kernel	Version 2.6.31 rc6
Linux Linux Kernel	Version 2.6.31 rc7
Linux Linux Kernel	Version 2.6.31 rc8
Linux Linux Kernel	Version 2.6.31 rc9

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux Eus	Version 6.3
Redhat Enterprise Linux Eus	Version 6.4
Redhat Enterprise Linux Server Eus	Version 6.3

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Suse Suse Linux Enterprise Desktop	Version 11 sp3
Suse Suse Linux Enterprise High Availability Extension	Version 11 sp3
Suse Suse Linux Enterprise Server	Version 11 sp3
Suse Suse Linux Enterprise Server	Version 11 sp3

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 6

Configuration F

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10
Canonical Ubuntu Linux	Version 13.10
Canonical Ubuntu Linux	Version 14.04

Configuration G

21 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Access Policy Manager	From 11.1.0 to 11.5.1
F5 Big Ip Advanced Firewall Manager	From 11.3.0 to 11.5.1
F5 Big Ip Analytics	From 11.1.0 to 11.5.1
F5 Big Ip Application Acceleration Manager	From 11.4.0 to 11.5.1
F5 Big Ip Application Security Manager	From 11.1.0 to 11.5.1
F5 Big Ip Edge Gateway	From 11.1.0 to 11.3.0
F5 Big Ip Global Traffic Manager	From 11.1.0 to 11.5.1
F5 Big Ip Link Controller	From 11.1.0 to 11.5.1
F5 Big Ip Local Traffic Manager	From 11.1.0 to 11.5.1
F5 Big Ip Policy Enforcement Manager	From 11.3.0 to 11.5.1
F5 Big Ip Protocol Security Module	From 11.1.0 to 11.4.1
F5 Big Ip Wan Optimization Manager	From 11.1.0 to 11.3.0
F5 Big Ip Webaccelerator	From 11.1.0 to 11.3.0
F5 Big Iq Application Delivery Controller	Version 4.5.0
F5 Big Iq Centralized Management	Version 4.6.0
F5 Big Iq Cloud	From 4.0.0 to 4.5.0
F5 Big Iq Cloud And Orchestration	Version 1.0.0
F5 Big Iq Device	From 4.2.0 to 4.5.0
F5 Big Iq Security	From 4.0.0 to 4.5.0
F5 Enterprise Manager	Version 3.1.0
F5 Enterprise Manager	Version 3.1.1

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (57)

http://bugzilla.novell.com/show_bug.cgi?id=875690

Source: secalert@redhat.com

Issue TrackingPermissions RequiredThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00

Source: secalert@redhat.com

Broken Link

http://linux.oracle.com/errata/ELSA-2014-0771.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://pastebin.com/raw.php?i=yTSFUBgZ

Source: secalert@redhat.com

ExploitMailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-0512.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/59218

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59262

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/59599

Source: secalert@redhat.com

Broken Link

http://source.android.com/security/bulletin/2016-07-01.html

Source: secalert@redhat.com

Not Applicable

http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2014/dsa-2926

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2014/dsa-2928

Source: secalert@redhat.com

Third Party Advisory

http://www.exploit-db.com/exploits/33516

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

http://www.openwall.com/lists/oss-security/2014/05/05/6

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.osvdb.org/106646

Source: secalert@redhat.com

Broken Link

http://www.ubuntu.com/usn/USN-2196-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2197-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2198-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2199-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2200-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2201-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2202-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2203-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2204-1

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1094232

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00

Source: secalert@redhat.com

ExploitPatchThird Party Advisory

http://bugzilla.novell.com/show_bug.cgi?id=875690