Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2014-0196 Details

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0196	CISA-ADP	US Government Resource
http://bugzilla.novell.com/show_bug.cgi?id=875690	CVE	Issue TrackingPermissions RequiredThird Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00	CVE	Broken Link
http://linux.oracle.com/errata/ELSA-2014-0771.html	CVE	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html	CVE	Mailing ListThird Party Advisory
http://pastebin.com/raw.php?i=yTSFUBgZ	CVE	ExploitMailing ListThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0512.html	CVE	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1094232	CVE	Issue TrackingPatchThird Party Advisory
http://secunia.com/advisories/59218	CVE	Not Applicable
http://secunia.com/advisories/59262	CVE	Broken Link
http://secunia.com/advisories/59599	CVE	Broken Link
https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00	CVE	ExploitPatchThird Party Advisory
http://source.android.com/security/bulletin/2016-07-01.html	CVE	Not Applicable
http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html	CVE	Third Party Advisory
http://www.debian.org/security/2014/dsa-2926	CVE	Third Party Advisory
http://www.debian.org/security/2014/dsa-2928	CVE	Third Party Advisory
http://www.exploit-db.com/exploits/33516	CVE	ExploitThird Party AdvisoryVDB Entry
http://www.openwall.com/lists/oss-security/2014/05/05/6	CVE	Mailing ListThird Party Advisory
http://www.osvdb.org/106646	CVE	Broken Link
http://www.ubuntu.com/usn/USN-2196-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2197-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2198-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2199-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2200-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2201-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2202-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2203-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2204-1	CVE	Third Party Advisory
http://bugzilla.novell.com/show_bug.cgi?id=875690	[email protected]	Issue TrackingPermissions RequiredThird Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00	[email protected]	Broken Link
http://linux.oracle.com/errata/ELSA-2014-0771.html	[email protected]	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html	[email protected]	Mailing ListThird Party Advisory
http://pastebin.com/raw.php?i=yTSFUBgZ	[email protected]	ExploitMailing ListThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0512.html	[email protected]	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1094232	[email protected]	Issue TrackingPatchThird Party Advisory
http://secunia.com/advisories/59218	[email protected]	Not Applicable
http://secunia.com/advisories/59262	[email protected]	Broken Link
http://secunia.com/advisories/59599	[email protected]	Broken Link
https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00	[email protected]	ExploitPatchThird Party Advisory
http://source.android.com/security/bulletin/2016-07-01.html	[email protected]	Not Applicable
http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html	[email protected]	Third Party Advisory
http://www.debian.org/security/2014/dsa-2926	[email protected]	Third Party Advisory
http://www.debian.org/security/2014/dsa-2928	[email protected]	Third Party Advisory
http://www.exploit-db.com/exploits/33516	[email protected]	ExploitThird Party AdvisoryVDB Entry
http://www.openwall.com/lists/oss-security/2014/05/05/6	[email protected]	Mailing ListThird Party Advisory
http://www.osvdb.org/106646	[email protected]	Broken Link
http://www.ubuntu.com/usn/USN-2196-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2197-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2198-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2199-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2200-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2201-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2202-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2203-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2204-1	[email protected]	Third Party Advisory

see all 57 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
Linux Kernel Race Condition Vulnerability	May 12, 2023	Jun 2, 2023	The impacted product is end-of-life and should be disconnected if still in use.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-362	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')	[email protected]
CWE-362	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')	CISA-ADP

Affected Products

Product	Versions
linux linux kernel	> 2.6.31, < 3.2.59 >= 3.3, < 3.4.91 >= 3.5, < 3.10.40 >= 3.11, < 3.12.20 >= 3.13, < 3.14.4
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:2.6.31:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:::::: cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:::::: cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:::::: cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:::::: cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:::::: cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:::::: cpe:2.3:o:linux:linux_kernel:2.6.31:rc9:::::: Remediation No remediation found in references.
debian debian linux	6.0 7.0
CPE cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux	6.0
CPE cpe:2.3:o:redhat:enterprise_linux:6.0:::::::* Remediation No remediation found in references.
redhat enterprise linux eus	6.3 6.4
CPE cpe:2.3:o:redhat:enterprise_linux_eus:6.3:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:6.4:::::::* Remediation No remediation found in references.
redhat enterprise linux server eus	6.3
CPE cpe:2.3:o:redhat:enterprise_linux_server_eus:6.3:::::::* Remediation No remediation found in references.
suse suse linux enterprise desktop	11 sp3
CPE cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3::::-::* Remediation No remediation found in references.
suse suse linux enterprise high availability extension	11 sp3
CPE cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension:11:sp3:::::: Remediation No remediation found in references.
suse suse linux enterprise server	11 sp3
CPE cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3::::-::* cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3::::vmware::* Remediation No remediation found in references.
oracle linux	6 -
CPE cpe:2.3:o:oracle:linux:6:-:::::: Remediation No remediation found in references.
canonical ubuntu linux	10.04 12.04 12.10 13.10 14.04
CPE cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:13.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm::: Remediation No remediation found in references.
f5 big-ip access policy manager	>= 11.1.0, <= 11.5.1
CPE cpe:2.3:a:f5:big-ip_access_policy_manager:::::::: Remediation No remediation found in references.
f5 big-ip advanced firewall manager	>= 11.3.0, <= 11.5.1
CPE cpe:2.3:a:f5:big-ip_advanced_firewall_manager:::::::: Remediation No remediation found in references.
f5 big-ip analytics	>= 11.1.0, <= 11.5.1
CPE cpe:2.3:a:f5:big-ip_analytics:::::::: Remediation No remediation found in references.
f5 big-ip application acceleration manager	>= 11.4.0, <= 11.5.1
CPE cpe:2.3:a:f5:big-ip_application_acceleration_manager:::::::: Remediation No remediation found in references.
f5 big-ip application security manager	>= 11.1.0, <= 11.5.1
CPE cpe:2.3:a:f5:big-ip_application_security_manager:::::::: Remediation No remediation found in references.
f5 big-ip edge gateway	>= 11.1.0, <= 11.3.0
CPE cpe:2.3:a:f5:big-ip_edge_gateway:::::::: Remediation No remediation found in references.
f5 big-ip global traffic manager	>= 11.1.0, <= 11.5.1
CPE cpe:2.3:a:f5:big-ip_global_traffic_manager:::::::: Remediation No remediation found in references.
f5 big-ip link controller	>= 11.1.0, <= 11.5.1
CPE cpe:2.3:a:f5:big-ip_link_controller:::::::: Remediation No remediation found in references.
f5 big-ip local traffic manager	>= 11.1.0, <= 11.5.1
CPE cpe:2.3:a:f5:big-ip_local_traffic_manager:::::::: Remediation No remediation found in references.
f5 big-ip policy enforcement manager	>= 11.3.0, <= 11.5.1
CPE cpe:2.3:a:f5:big-ip_policy_enforcement_manager:::::::: Remediation No remediation found in references.
f5 big-ip protocol security module	>= 11.1.0, <= 11.4.1
CPE cpe:2.3:a:f5:big-ip_protocol_security_module:::::::: Remediation No remediation found in references.
f5 big-ip wan optimization manager	>= 11.1.0, <= 11.3.0
CPE cpe:2.3:a:f5:big-ip_wan_optimization_manager:::::::: Remediation No remediation found in references.
f5 big-ip webaccelerator	>= 11.1.0, <= 11.3.0
CPE cpe:2.3:a:f5:big-ip_webaccelerator:::::::: Remediation No remediation found in references.
f5 big-iq application delivery controller	4.5.0
CPE cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:::::::* Remediation No remediation found in references.
f5 big-iq centralized management	4.6.0
CPE cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:::::::* Remediation No remediation found in references.
f5 big-iq cloud	>= 4.0.0, <= 4.5.0
CPE cpe:2.3:a:f5:big-iq_cloud:::::::: Remediation No remediation found in references.
f5 big-iq cloud and orchestration	1.0.0
CPE cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:::::::* Remediation No remediation found in references.
f5 big-iq device	>= 4.2.0, <= 4.5.0
CPE cpe:2.3:a:f5:big-iq_device:::::::: Remediation No remediation found in references.
f5 big-iq security	>= 4.0.0, <= 4.5.0
CPE cpe:2.3:a:f5:big-iq_security:::::::: Remediation No remediation found in references.
f5 enterprise manager	3.1.0 3.1.1
CPE cpe:2.3:a:f5:enterprise_manager:3.1.0:::::::* cpe:2.3:a:f5:enterprise_manager:3.1.1:::::::* Remediation No remediation found in references.

Change History

18 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
Apr 21, 2026	Modified Analysis	[email protected]
Oct 22, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Apr 3, 2025	Modified Analysis	[email protected]
Feb 7, 2025	CVE Modified	CISA-ADP
Dec 19, 2024	Reanalysis	[email protected]
Dec 19, 2024	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 9, 2024	Modified Analysis	[email protected]
Feb 13, 2023	CVE Modified	[email protected]
Aug 19, 2020	Modified Analysis	[email protected]
Jan 7, 2017	CVE Modified	[email protected]
Jul 12, 2016	CVE Modified	[email protected]
May 7, 2014	Initial Analysis	[email protected]

CVE-2014-0196 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO