CVE-2014-0196
MEDIUM KEVLinux Kernel < 3.14.3 - Denial of Service and Privilege Escalation via Race Condition in n_tty_write
Title source: llmExploitation Summary
CVE-2014-0196 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added May 12, 2023. EIP tracks 3 public exploits from researchers including Matthew Daley, tempbottle, SunRain.
AI-analyzed exploit summary This exploit leverages a race condition in the Linux kernel's PTY handling (CVE-2014-0196) to achieve local privilege escalation by overflowing into a tty_struct and manipulating kernel credentials.
Description
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
Exploits (3)
This exploit leverages a race condition in the Linux kernel's PTY handling (CVE-2014-0196) to achieve local privilege escalation by overflowing into a tty_struct and manipulating kernel credentials.
This is a functional privilege escalation exploit for CVE-2014-0196, targeting a race condition in the Linux kernel's n_tty_write function. It manipulates PTY operations to corrupt kernel memory and achieve root access.
This is a functional privilege escalation exploit for CVE-2014-0196, targeting a race condition in the Linux kernel's raw mode PTY local echo functionality. It leverages a heap overflow to overwrite a tty_struct and gain root privileges.
References (29)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H