Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-0196
HistoryMay 07, 2014 - 10:55 a.m.

CVE-2014-0196

2014-05-0710:55:00
CWE-362
[email protected]
web.nvd.nist.gov
394
In Wild
cve-2014-0196
linux kernel
n_tty_write
denial of service
memory corruption
system crash
privilege escalation
race condition

6.2 Medium

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.4%

JSON

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the “LECHO & !OPOST” case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

References

Related

android 1
redhat 5
canvas 1
nessus 32
exploitpack 1
f5 2
openvas 74
attackerkb 1
zdt 1
veracode 7
ubuntu 11
threatpost 1
cisa_kev 1
seebug 1
oraclelinux 5
securityvulns 3
debiancve 1
prion 2
ubuntucve 1
amazon 2
exploitdb 1
cve 1
osv 2
debian 2
suse 6
mageia 10
altlinux 1
kitploit 1
centos 1
fedora 21
android
android
pty race
2014-04-30 00:00:00
redhat
redhat
(RHSA-2014:0512) Important: kernel security update
2014-05-19 00:00:00
(RHSA-2014:0678) Important: kernel security update
2014-06-10 00:00:00
(RHSA-2014:0520) Important: kernel security and bug fix update
2014-05-20 00:00:00
canvas
canvas
Immunity Canvas: LINUX_TTY_RACE
2014-05-07 10:55:00
nessus
nessus
F5 Networks BIG-IP : Linux kernel TTY vulnerability (K15319)
2014-10-10 00:00:00
Amazon Linux AMI : kernel (ALAS-2014-339)
2014-10-12 00:00:00
Ubuntu 12.10 : linux vulnerability (USN-2202-1)
2014-05-06 00:00:00
exploitpack
exploitpack
Linux Kernel 3.14-rc1 3.15-rc4 (x64) - Raw Mode PTY Echo Race Condition Privilege Escalation
2014-05-26 00:00:00
f5
f5
SOL15319 - Linux kernel TTY vulnerability CVE-2014-0196
2014-06-05 00:00:00
K15319 : Linux kernel TTY vulnerability CVE-2014-0196
2014-12-04 00:00:00
openvas
openvas
Ubuntu Update for linux-ec2 USN-2197-1
2014-05-12 00:00:00
Ubuntu: Security Advisory (USN-2202-1)
2014-05-12 00:00:00
Ubuntu: Security Advisory (USN-2198-1)
2014-05-12 00:00:00
attackerkb
attackerkb
CVE-2014-0196
2014-05-07 00:00:00
zdt
zdt
Linux Kernel 3.15-rc4 PTY Race Condition Exploit
2014-05-14 00:00:00
veracode
veracode
Buffer Overflows
2019-05-02 05:03:25
Denial Of Service (DoS)
2019-05-02 05:03:26
Information Disclosure
2019-05-02 05:03:25
ubuntu
ubuntu
Linux kernel vulnerability
2014-05-06 00:00:00
Linux kernel (Raring HWE) vulnerability
2014-05-06 00:00:00
Linux kernel (Quantal HWE) vulnerability
2014-05-06 00:00:00
threatpost
threatpost
Five Year Old Security Vulnerability Patched in Linux Kernel
2014-05-15 11:05:41
cisa_kev
cisa_kev
Linux Kernel Race Condition Vulnerability
2023-05-12 00:00:00
seebug
seebug
Linux kernel 3.14-rc1 <= 3.15-rc4 - Raw Mode PTY Local Echo Race Condition (x64) Local Privilege Escalation
2014-07-01 00:00:00
oraclelinux
oraclelinux
kernel security update
2014-07-20 00:00:00
unbreakable enterprise kernel security update
2014-07-29 00:00:00
unbreakable enterprise kernel security update
2014-07-30 00:00:00
securityvulns
securityvulns
[USN-2196-1] Linux kernel vulnerability
2014-05-07 00:00:00
[SECURITY] [DSA 2926-1] linux security update
2014-05-15 00:00:00
Linux kernel multiple security vulnerabilities
2014-05-29 00:00:00
debiancve
debiancve
CVE-2014-0196
2014-05-07 10:55:00
prion
prion
Race condition
2014-05-07 10:55:00
Design/Logic Flaw
2016-07-11 01:59:00
ubuntucve
ubuntucve
CVE-2014-0196
2014-05-05 00:00:00
amazon
amazon
Medium: kernel
2014-05-13 16:40:00
Medium: kernel
2014-08-21 11:03:00
exploitdb
exploitdb
Linux Kernel 3.14-rc1 &lt; 3.15-rc4 (x64) - Raw Mode PTY Echo Race Condition Privilege Escalation
2014-05-26 00:00:00
cve
cve
CVE-2014-9791
2016-07-11 01:59:00
osv
osv
linux-2.6 - security update
2014-05-14 00:00:00
linux - security update
2014-05-12 00:00:00
debian
debian
[SECURITY] [DSA 2928-1] linux-2.6 security update
2014-05-14 18:21:22
[SECURITY] [DSA 2926-1] linux security update
2014-05-12 15:59:46
suse
suse
Security update for Linux kernel (important)
2014-05-20 19:04:37
Security update for Linux Kernel (important)
2014-05-16 03:04:20
kernel: security and bugfix update (important)
2014-05-19 14:04:14
mageia
mageia
Updated kernel-rt packages fix multiple vulnerabilities
2014-05-19 22:30:17
Updated kernel packages fix multiple vulnerabilities
2014-05-18 03:41:52
Updated kernel-linus packages fix multiple vulnerabilities
2014-05-19 22:30:17
altlinux
altlinux
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt25
2014-06-21 00:00:00
kitploit
kitploit
Kernelpop - Kernel Privilege Escalation Enumeration And Exploitation Framework
2017-11-04 13:30:00
centos
centos
kernel, perf, python security update
2013-04-24 02:13:29
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.14.3-200.fc20
2014-05-10 03:21:17
[SECURITY] Fedora 20 Update: kernel-3.14.4-200.fc20
2014-05-16 10:04:40
[SECURITY] Fedora 20 Update: kernel-3.14.6-200.fc20
2014-06-11 16:31:10

6.2 Medium

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.4%

JSON
Related for CVE-2014-0196
android1redhat5canvas1nessus32exploitpack1f52openvas74attackerkb1zdt1veracode7ubuntu11threatpost1cisa_kev1seebug1oraclelinux5securityvulns3debiancve1prion2ubuntucve1amazon2exploitdb1cve1osv2debian2suse6mageia10altlinux1kitploit1centos1fedora21