AEGLIX vulnerability intelligence
CVE-2014-0196
MEDIUM · CVSS 5.5 · Analyzed
Published: 2014-05-07 · Updated: 2026-06-17 · Source: NVD
Vulnerability overview
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
Severity and scoring
- CVSS score
- 5.5 · MEDIUM
- CVSS version
- 3.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-362
CVSS measures technical severity; it does not establish whether this vulnerability is being exploited in your environment.
Known exploitation and remediation
Listed in CISA’s Known Exploited Vulnerabilities catalog.
- Affected product
- Linux · Kernel
- Added to catalog
- 2023-05-12
- Required action
- The impacted product is end-of-life and should be disconnected if still in use.
- CISA remediation due date
- 2023-06-02
CISA deadlines apply to the organizations covered by its directives. Confirm your own remediation requirements.
Verify affected versions and patch availability in the vendor advisory before making changes.
Affected products and versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
After (exclusive): 2.6.31
Before (exclusive): 3.2.59
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
From (inclusive): 3.3
Before (exclusive): 3.4.91
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
From (inclusive): 3.5
Before (exclusive): 3.10.40
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
From (inclusive): 3.11
Before (exclusive): 3.12.20
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
From (inclusive): 3.13
Before (exclusive): 3.14.4
cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.31:rc9:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.3:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:-:*:*
cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:-:*:*
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.5.1
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
From (inclusive): 11.3.0
Through (inclusive): 11.5.1
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.5.1
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
From (inclusive): 11.4.0
Through (inclusive): 11.5.1
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.5.1
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.3.0
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.5.1
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.5.1
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.5.1
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
From (inclusive): 11.3.0
Through (inclusive): 11.5.1
cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.4.1
cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.3.0
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
From (inclusive): 11.1.0
Through (inclusive): 11.3.0
cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:*
From (inclusive): 4.0.0
Through (inclusive): 4.5.0
cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:*
From (inclusive): 4.2.0
Through (inclusive): 4.5.0
cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:*
From (inclusive): 4.0.0
Through (inclusive): 4.5.0
cpe:2.3:a:f5:enterprise_manager:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*
These are NVD CPE applicability entries. Some products depend on configuration conditions; consult the official record to confirm applicability.
Advisories and references
- http://bugzilla.novell.com/show_bug.cgi?id=875690
Issue Tracking · Permissions Required · Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00
Broken Link
- http://linux.oracle.com/errata/ELSA-2014-0771.html
Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html
Mailing List · Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
Mailing List · Third Party Advisory
- http://pastebin.com/raw.php?i=yTSFUBgZ
Exploit · Mailing List · Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0512.html
Third Party Advisory
- http://secunia.com/advisories/59218
Not Applicable
- http://secunia.com/advisories/59262
Broken Link
- http://secunia.com/advisories/59599
Broken Link
- http://source.android.com/security/bulletin/2016-07-01.html
Not Applicable
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html
Third Party Advisory
- http://www.debian.org/security/2014/dsa-2926
Third Party Advisory
- http://www.debian.org/security/2014/dsa-2928
Third Party Advisory
- http://www.exploit-db.com/exploits/33516
Exploit · Third Party Advisory · VDB Entry
- http://www.openwall.com/lists/oss-security/2014/05/05/6
Mailing List · Third Party Advisory
- http://www.osvdb.org/106646
Broken Link
- http://www.ubuntu.com/usn/USN-2196-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2197-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2198-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2199-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2200-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2201-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2202-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2203-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2204-1
Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1094232
Issue Tracking · Patch · Third Party Advisory
- https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00
Exploit · Patch · Third Party Advisory
- http://bugzilla.novell.com/show_bug.cgi?id=875690
Issue Tracking · Permissions Required · Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00
Broken Link
- http://linux.oracle.com/errata/ELSA-2014-0771.html
Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html
Mailing List · Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
Mailing List · Third Party Advisory
- http://pastebin.com/raw.php?i=yTSFUBgZ
Exploit · Mailing List · Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0512.html
Third Party Advisory
- http://secunia.com/advisories/59218
Not Applicable
- http://secunia.com/advisories/59262
Broken Link
- http://secunia.com/advisories/59599
Broken Link
- http://source.android.com/security/bulletin/2016-07-01.html
Not Applicable
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html
Third Party Advisory
- http://www.debian.org/security/2014/dsa-2926
Third Party Advisory
- http://www.debian.org/security/2014/dsa-2928
Third Party Advisory
- http://www.exploit-db.com/exploits/33516
Exploit · Third Party Advisory · VDB Entry
- http://www.openwall.com/lists/oss-security/2014/05/05/6
Mailing List · Third Party Advisory
- http://www.osvdb.org/106646
Broken Link
- http://www.ubuntu.com/usn/USN-2196-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2197-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2198-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2199-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2200-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2201-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2202-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2203-1
Third Party Advisory
- http://www.ubuntu.com/usn/USN-2204-1
Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1094232
Issue Tracking · Patch · Third Party Advisory
- https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00
Exploit · Patch · Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0196
US Government Resource