Lucene search

K
amazonAmazonALAS-2014-339
HistoryMay 13, 2014 - 4:40 p.m.

Medium: kernel

2014-05-1316:40:00
alas.aws.amazon.com
18

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.3%

Issue Overview:

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the “LECHO & !OPOST” case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Affected Packages:

kernel

Issue Correction:
Run yum update kernel to update your system. You will need to reboot your system in order for the new kernel to be running.

New Packages:

i686:  
    perf-debuginfo-3.10.40-50.136.amzn1.i686  
    perf-3.10.40-50.136.amzn1.i686  
    kernel-3.10.40-50.136.amzn1.i686  
    kernel-headers-3.10.40-50.136.amzn1.i686  
    kernel-devel-3.10.40-50.136.amzn1.i686  
    kernel-debuginfo-common-i686-3.10.40-50.136.amzn1.i686  
    kernel-debuginfo-3.10.40-50.136.amzn1.i686  
  
noarch:  
    kernel-doc-3.10.40-50.136.amzn1.noarch  
  
src:  
    kernel-3.10.40-50.136.amzn1.src  
  
x86_64:  
    perf-3.10.40-50.136.amzn1.x86_64  
    kernel-devel-3.10.40-50.136.amzn1.x86_64  
    kernel-debuginfo-3.10.40-50.136.amzn1.x86_64  
    kernel-3.10.40-50.136.amzn1.x86_64  
    kernel-headers-3.10.40-50.136.amzn1.x86_64  
    kernel-debuginfo-common-x86_64-3.10.40-50.136.amzn1.x86_64  
    perf-debuginfo-3.10.40-50.136.amzn1.x86_64  

Additional References

Red Hat: CVE-2014-0196

Mitre: CVE-2014-0196

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.3%