⚠ Actively exploited
Added to CISA KEV on 2023-05-12. Federal agencies required to patch by 2023-06-02. Required action: The impacted product is end-of-life and should be disconnected if still in use..

CVE-2014-0196

CWE-362 — Race Condition20 documents12 sources
Severity
5.5MEDIUM
EPSS
48.6%
top 2.25%
CISA KEV
KEV
Added 2023-05-12
Due 2023-06-02
Exploit
Exploited in wild
Active exploitation observed
Affected products
30
Linux Linux KernelF5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall Manager+27 more
Timeline
PublishedMay 7
KEV addedMay 12
KEV dueJun 2
CISA Required Action: The impacted product is end-of-life and should be disconnected if still in use.

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages26 packages

▶NVDlinux/linux_kernel3.3 — 3.4.91+5
▶NVDf5/big-ip_access_policy_manager11.1.0 — 11.5.1
▶NVDf5/big-ip_local_traffic_manager11.1.0 — 11.5.1
▶Debianlinux< 3.14.4-1+3
▶NVDf5/big-ip_global_traffic_manager11.1.0 — 11.5.1

Also affects: Debian Linux 6.0, 7.0, Ubuntu Linux 10.04, 12.04, 12.10, 13.10, 14.04, Enterprise Linux 6.0, 6.3, 6.4

Patches

Patch: bugzilla.redhat.com ↗Patch: github.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

5
GHSA
GHSA-xwpg-vm43-3qwm: The n_tty_write function in drivers/tty/n_tty↗2022-05-13
▶
OSV
CVE-2014-0196: The n_tty_write function in drivers/tty/n_tty↗2014-05-07
▶
CVEList
CVE-2014-0196: The n_tty_write function in drivers/tty/n_tty↗2014-05-07
▶
Kernel
n_tty: Fix n_tty_write crash when echoing in raw mode↗2014-05-03
▶
VulnCheck
Linux Kernel Race Condition Vulnerability↗2014
▶

💥Exploits & PoCs

1
Exploit-DB
Linux Kernel 3.14-rc1 < 3.15-rc4 (x64) - Raw Mode PTY Echo Race Condition Privilege Escalation↗2014-05-26
▶

📋Vendor Advisories

11
CISA
Linux Kernel Race Condition Vulnerability↗2023-05-12
▶
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities↗2014-06-27
▶
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2014-05-27
▶
Ubuntu
Linux kernel vulnerability↗2014-05-06
▶
Ubuntu
Linux kernel (Raring HWE) vulnerability↗2014-05-06
▶

💬Community

2
Bugzilla
CVE-2014-0196 kernel: pty layer race condition leading to memory corruption↗2014-05-05
▶
Bugzilla
CVE-2014-0196 kernel: pty layer race condition leading memory corruption [fedora-all]↗2014-05-05
▶
CVE-2014-0196 (MEDIUM CVSS 5.5) | The n_tty_write function in drivers | cvebase.io