CVE-2014-0196

MEDIUM KEV

Linux kernel <3.14.3 - DoS

Title source: llm

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Exploits (4)

nomisec WORKING POC 3 stars
by tempbottle · local
https://github.com/tempbottle/CVE-2014-0196
nomisec WORKING POC
by SunRain · dos
https://github.com/SunRain/CVE-2014-0196
exploitdb WORKING POC
by Matthew Daley · clocallinux_x86-64
https://www.exploit-db.com/exploits/33516

References (29)

... and 9 more

Scores

CVSS v3 5.5
EPSS 0.6176
EPSS Percentile 98.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitation Intel

CISA KEV 2023-05-12
VulnCheck KEV 2023-05-12
InTheWild.io 2023-05-12
ENISA EUVD EUVD-2014-0247

Classification

CWE
CWE-362
Status draft

Affected Products (46)

linux/linux_kernel < 3.2.59
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
debian/debian_linux
debian/debian_linux
redhat/enterprise_linux
redhat/enterprise_linux_eus
redhat/enterprise_linux_eus
redhat/enterprise_linux_server_eus
... and 31 more

Timeline

Published May 07, 2014
KEV Added May 12, 2023
Tracked Since Feb 18, 2026