The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does…
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.
Summary
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 46
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | after 2.6.31, before 3.2.59; 3.3 to before 3.4.91; 3.5 to before 3.10.40; 3.11 to before 3.12.20; 3.13 to before 3.14.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:* | 2.6.31 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:* | 2.6.31 rc3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:* | 2.6.31 rc4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:* | 2.6.31 rc5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:* | 2.6.31 rc6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:* | 2.6.31 rc7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:* | 2.6.31 rc8 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.31:rc9:*:*:*:*:*:* | 2.6.31 rc9 | Vulnerable | Linux |
| cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Debian |
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions after 2.6.31, before 3.2.59; 3.3 to before 3.4.91; 3.5 to before 3.10.40; 3.11 to before 3.12.20; 3.13 to before 3.14.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:* Versions 2.6.31 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:* Versions 2.6.31 rc3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:* Versions 2.6.31 rc4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:* Versions 2.6.31 rc5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:* Versions 2.6.31 rc6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:* Versions 2.6.31 rc7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:* Versions 2.6.31 rc8 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.31:rc9:*:*:*:*:*:* Versions 2.6.31 rc9 Vulnerable ·Linux
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Debian
Show 36 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Debian |
| cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:* | 6.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:* | 6.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_eus:6.3:*:*:*:*:*:*:* | 6.3 | Vulnerable | Red Hat |
| cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:-:*:* | 11 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:* | 11 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:-:*:* | 11 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:* | 11 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:* | 6 | Vulnerable | Oracle |
| cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:* | 10.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* | 12.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:* | 12.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:* | 13.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* | 11.1.0 – 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* | 11.3.0 – 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* | 11.1.0 – 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* | 11.4.0 – 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* | 11.1.0 – 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* | 11.1.0 – 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* | 11.1.0 – 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* | 11.1.0 – 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* | 11.1.0 – 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* | 11.3.0 – 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:* | 11.1.0 – 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:* | 11.1.0 – 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* | 11.1.0 – 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:* | 4.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:* | 4.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:* | 4.0.0 – 4.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:* | 1.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:* | 4.2.0 – 4.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:* | 4.0.0 – 4.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:enterprise_manager:3.1.0:*:*:*:*:*:*:* | 3.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:* | 3.1.1 | Vulnerable | F5 |
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_eus:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Red Hat
- cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:-:*:* Versions 11 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:-:*:* Versions 11 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:* Versions 11 sp3 Vulnerable ·SUSE
- cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:* Versions 6 Vulnerable ·Oracle
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:* Versions 10.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* Versions 12.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:* Versions 12.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:* Versions 13.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* Versions 11.3.0 – 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* Versions 11.4.0 – 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* Versions 11.3.0 – 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* Versions 11.1.0 – 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:* Versions 4.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:* Versions 4.0.0 – 4.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:* Versions 4.2.0 – 4.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:* Versions 4.0.0 – 4.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:enterprise_manager:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·F5
Remediation
Red Hat 5 advisories
- RHSA-2014:0678 Released 2014-06-10 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-123.1.2.el7, kernel-abi-whitelists-3.10.0-123.1.2.el7, kernel-debug-3.10.0-123.1.2.el7 +6
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-doc-3.10.0-123.1.2.el7, kernel-tools-libs-devel-3.10.0-123.1.2.el7, python-perf-3.10.0-123.1.2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-123.1.2.el7, kernel-abi-whitelists-3.10.0-123.1.2.el7, kernel-debug-3.10.0-123.1.2.el7 +6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-doc-3.10.0-123.1.2.el7, kernel-tools-libs-devel-3.10.0-123.1.2.el7, python-perf-3.10.0-123.1.2.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-123.1.2.el7, kernel-abi-whitelists-3.10.0-123.1.2.el7, kernel-bootwrapper-3.10.0-123.1.2.el7 +9
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-doc-3.10.0-123.1.2.el7, kernel-tools-libs-devel-3.10.0-123.1.2.el7, python-perf-3.10.0-123.1.2.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-123.1.2.el7, kernel-abi-whitelists-3.10.0-123.1.2.el7, kernel-debug-3.10.0-123.1.2.el7 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-doc-3.10.0-123.1.2.el7, kernel-tools-libs-devel-3.10.0-123.1.2.el7, python-perf-3.10.0-123.1.2.el7
- RHSA-2014:0557 Released 2014-05-27 · Red Hat rating Importantkernel-rt security update
- Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-3.10.33-rt32.34.el6rt, kernel-rt-debug-3.10.33-rt32.34.el6rt, kernel-rt-debug-devel-3.10.33-rt32.34.el6rt +7
- RHSA-2014:0520 Released 2014-05-20 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux Server AUS (v. 6.2) kernel-2.6.32-220.51.1.el6, kernel-debug-2.6.32-220.51.1.el6, kernel-debug-devel-2.6.32-220.51.1.el6 +5
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) kernel-2.6.32-220.51.1.el6, python-perf-2.6.32-220.51.1.el6
Show 2 more Red Hat advisories
- RHSA-2014:0512 Released 2014-05-19 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Compute Node EUS (v. 6.3) kernel-2.6.32-279.43.2.el6, kernel-debug-2.6.32-279.43.2.el6, kernel-debug-devel-2.6.32-279.43.2.el6 +5
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3) kernel-2.6.32-279.43.2.el6, python-perf-2.6.32-279.43.2.el6
- Red Hat Enterprise Linux Server EUS (v. 6.3) kernel-2.6.32-279.43.2.el6, kernel-bootwrapper-2.6.32-279.43.2.el6, kernel-debug-2.6.32-279.43.2.el6 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 6.3) kernel-2.6.32-279.43.2.el6, python-perf-2.6.32-279.43.2.el6
- RHSA-2013:0744 Released 2013-04-23 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-358.6.1.el6, kernel-debug-2.6.32-358.6.1.el6, kernel-debug-devel-2.6.32-358.6.1.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-358.6.1.el6, python-perf-2.6.32-358.6.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-358.6.1.el6, kernel-debug-2.6.32-358.6.1.el6, kernel-debug-devel-2.6.32-358.6.1.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-358.6.1.el6, python-perf-2.6.32-358.6.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-358.6.1.el6, kernel-bootwrapper-2.6.32-358.6.1.el6, kernel-debug-2.6.32-358.6.1.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-358.6.1.el6, python-perf-2.6.32-358.6.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-358.6.1.el6, kernel-debug-2.6.32-358.6.1.el6, kernel-debug-devel-2.6.32-358.6.1.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-358.6.1.el6, python-perf-2.6.32-358.6.1.el6
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2014:0678 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2014:0678 |
| Red Hat Enterprise Linux Compute Node EUS (v. 6.3) | Fixed | RHSA-2014:0512 |
| Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3) | Fixed | RHSA-2014:0512 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2014:0678 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2014:0678 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2013:0744 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2013:0744 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2013:0744 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2013:0744 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2013:0744 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2014:0678 |
| Red Hat Enterprise Linux Server AUS (v. 6.2) | Fixed | RHSA-2014:0520 |
| Red Hat Enterprise Linux Server EUS (v. 6.3) | Fixed | RHSA-2014:0512 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2013:0744 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2014:0678 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.2) | Fixed | RHSA-2014:0520 |
| Red Hat Enterprise Linux Server Optional EUS (v. 6.3) | Fixed | RHSA-2014:0512 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2013:0744 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2014:0678 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2013:0744 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2014:0678 |
| Red Hat MRG Realtime for RHEL 6 Server v.2 | Fixed | RHSA-2014:0557 |
Not affected: 1 product
- Red Hat Enterprise Linux 5
Timeline
- 2023-05-12 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2014-0196
- 2026-10-03 Alias added: GHSA-xwpg-vm43-3qwm
References
Exploit 3
Advisory 18
- USN-2203-1
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html
- SUSE-SU-2014:0683
- [oss-security] 20140429 CVE-2014-0196: Linux kernel pty layer race condition memory corruption
- USN-2204-1
- USN-2202-1
- DSA-2928
- USN-2199-1
- http://linux.oracle.com/errata/ELSA-2014-0771.html
- USN-2197-1
- RHSA-2014:0512
- DSA-2926
- SUSE-SU-2014:0667
- http://bugzilla.novell.com/show_bug.cgi?id=875690
- USN-2198-1
- USN-2200-1
- USN-2201-1
- USN-2196-1
More Linux Kernel vulnerabilities
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
- TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
- TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
- TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
- TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
Sources
- CVE-2014-0196 · CVE Program
- CVE-2014-0196 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-xwpg-vm43-3qwm · GitHub Advisory Database · CC BY 4.0
- CVE-2014-0196 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences