The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
History
07 Feb 2025, 14:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 6.9
v3 : 5.5 |
19 Dec 2024, 18:45
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:* cpe:2.3:a:f5:enterprise_manager:3.1.0:*:*:*:*:*:*:* |
Information
Published : 2014-05-07 10:55
Updated : 2025-04-12 10:46
NVD link : CVE-2014-0196
Mitre link : CVE-2014-0196
CVE.ORG link : CVE-2014-0196
JSON object : View
Products Affected
f5
- big-ip_protocol_security_module
- big-iq_application_delivery_controller
- big-iq_device
- big-ip_advanced_firewall_manager
- enterprise_manager
- big-ip_global_traffic_manager
- big-ip_webaccelerator
- big-ip_application_security_manager
- big-ip_application_acceleration_manager
- big-iq_cloud
- big-ip_link_controller
- big-ip_local_traffic_manager
- big-iq_security
- big-ip_analytics
- big-iq_cloud_and_orchestration
- big-ip_edge_gateway
- big-iq_centralized_management
- big-ip_wan_optimization_manager
- big-ip_policy_enforcement_manager
- big-ip_access_policy_manager
linux
- linux_kernel
suse
- suse_linux_enterprise_high_availability_extension
- suse_linux_enterprise_server
- suse_linux_enterprise_desktop
canonical
- ubuntu_linux
oracle
- linux
redhat
- enterprise_linux_eus
- enterprise_linux
- enterprise_linux_server_eus
debian
- debian_linux
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')