{"api_version":"1","generated_at":"2026-07-23T22:22:10+00:00","cve":"CVE-2014-0196","urls":{"html":"https://cve.report/CVE-2014-0196","api":"https://cve.report/api/cve/CVE-2014-0196.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-0196","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0196"},"summary":{"title":"CVE-2014-0196","description":"The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","state":"PUBLISHED","assigner":"redhat","published_at":"2014-05-07 10:55:04","updated_at":"2026-04-21 20:07:27"},"problem_types":["CWE-362","n/a","CWE-362 CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"],"metrics":[{"version":"3.1","source":"ADP","type":"DECLARED","score":"5.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}},{"version":"3.1","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","score":"5.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.9","severity":"","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://linux.oracle.com/errata/ELSA-2014-0771.html","name":"http://linux.oracle.com/errata/ELSA-2014-0771.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"linux.oracle.com | ELSA-2014-0771 -  kernel security and bug fix update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2014/dsa-2926","name":"http://www.debian.org/security/2014/dsa-2926","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-2926-1 linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2198-1","name":"http://www.ubuntu.com/usn/USN-2198-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2198-1: Linux kernel vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00","name":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"kernel/git/torvalds/linux.git - Linux kernel source tree","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/59262","name":"http://secunia.com/advisories/59262","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Security Advisory SA59262 - Oracle Linux update for kernel - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0512.html","name":"http://rhn.redhat.com/errata/RHSA-2014-0512.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094232","name":"https://bugzilla.redhat.com/show_bug.cgi?id=1094232","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"],"title":"Bug 1094232 – CVE-2014-0196 kernel: pty layer race condition leading to memory corruption","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html","name":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] SUSE-SU-2014:0683-1: important: Security update for","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2200-1","name":"http://www.ubuntu.com/usn/USN-2200-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2200-1: Linux kernel (Raring HWE) vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00","name":"https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"],"title":"n_tty: Fix n_tty_write crash when echoing in raw mode · torvalds/linux@4291086 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2196-1","name":"http://www.ubuntu.com/usn/USN-2196-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2196-1: Linux kernel vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","name":"http://source.android.com/security/bulletin/2016-07-01.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"],"title":"Android Security Bulletin—July 2016 | Android Open Source Project","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/59218","name":"http://secunia.com/advisories/59218","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"],"title":"Security Advisory SA59218 - F5 Multiple Products Linux Kernel &quot;n_tty_write()&quot; Race Condition Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2014/05/05/6","name":"http://www.openwall.com/lists/oss-security/2014/05/05/6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"oss-security - CVE-2014-0196: Linux kernel pty layer race condition memory\n\tcorruption","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html","name":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] SUSE-SU-2014:0667-1: important: Security update for","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2202-1","name":"http://www.ubuntu.com/usn/USN-2202-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2202-1: Linux kernel vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html","name":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/106646","name":"http://www.osvdb.org/106646","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.ubuntu.com/usn/USN-2197-1","name":"http://www.ubuntu.com/usn/USN-2197-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2197-1: Linux kernel (EC2) vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2204-1","name":"http://www.ubuntu.com/usn/USN-2204-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2204-1: Linux kernel vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://bugzilla.novell.com/show_bug.cgi?id=875690","name":"http://bugzilla.novell.com/show_bug.cgi?id=875690","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required","Third Party Advisory"],"title":"Bug 875690 – VUL-0: CVE-2014-0196: kernel: memory corruption via a race in pty write handling","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/59599","name":"http://secunia.com/advisories/59599","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Security Advisory SA59599 - Ubuntu update for kernel - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2203-1","name":"http://www.ubuntu.com/usn/USN-2203-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2203-1: Linux kernel vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://pastebin.com/raw.php?i=yTSFUBgZ","name":"http://pastebin.com/raw.php?i=yTSFUBgZ","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"],"title":"","mime":"text/x-c","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/33516","name":"http://www.exploit-db.com/exploits/33516","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"title":"Linux kernel 3.14-rc1 <= 3.15-rc4 - Raw Mode PTY Local Echo Race Condition (x64) Local Privilege Escalation","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2014/dsa-2928","name":"http://www.debian.org/security/2014/dsa-2928","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-2928-1 linux-2.6","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2199-1","name":"http://www.ubuntu.com/usn/USN-2199-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2199-1: Linux kernel (Quantal HWE) vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0196","name":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0196","refsource":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"http://www.ubuntu.com/usn/USN-2201-1","name":"http://www.ubuntu.com/usn/USN-2201-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-2201-1: Linux kernel (Saucy HWE) vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4291086b1f081b869c6d79e5b7441633dc3ace00","name":"CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4291086b1f081b869c6d79e5b7441633dc3ace00","refsource":"MITRE","tags":[],"title":"kernel/git/torvalds/linux.git - Linux kernel source tree","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0196","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0196","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[{"source":"ADP","time":"2023-05-12T00:00:00.000Z","lang":"en","value":"CVE-2014-0196 added to CISA KEV"}],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"196","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":{"cve_year":"2014","cve_id":"196","cve":"CVE-2014-0196","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Race Condition Vulnerability","dateAdded":"2023-05-12","shortDescription":"Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","dueDate":"2023-06-02","knownRansomwareCampaignUse":"Unknown","notes":"https://lkml.iu.edu/hypermail/linux/kernel/1609.1/02103.html; https://nvd.nist.gov/vuln/detail/CVE-2014-0196","cwes":"CWE-362","catalogVersion":"2026.07.23","updated_at":"2026-07-23 17:19:18"},"epss":{"cve_year":"2014","cve_id":"196","cve":"CVE-2014-0196","epss":"0.224750000","percentile":"0.974590000","score_date":"2026-07-22","updated_at":"2026-07-23 00:09:33"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:05:39.223Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"USN-2203-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2203-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html"},{"name":"106646","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/106646"},{"name":"SUSE-SU-2014:0683","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html"},{"name":"[oss-security] 20140429 CVE-2014-0196: Linux kernel pty layer race condition memory corruption","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2014/05/05/6"},{"name":"59262","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/59262"},{"name":"USN-2204-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2204-1"},{"name":"59218","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/59218"},{"name":"USN-2202-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2202-1"},{"name":"33516","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/33516"},{"name":"DSA-2928","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2014/dsa-2928"},{"name":"USN-2199-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2199-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://linux.oracle.com/errata/ELSA-2014-0771.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094232"},{"name":"USN-2197-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2197-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://source.android.com/security/bulletin/2016-07-01.html"},{"name":"RHSA-2014:0512","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2014-0512.html"},{"name":"59599","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/59599"},{"name":"DSA-2926","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2014/dsa-2926"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00"},{"name":"SUSE-SU-2014:0667","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://pastebin.com/raw.php?i=yTSFUBgZ"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugzilla.novell.com/show_bug.cgi?id=875690"},{"name":"USN-2198-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2198-1"},{"name":"USN-2200-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2200-1"},{"name":"USN-2201-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2201-1"},{"name":"USN-2196-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2196-1"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2014-0196","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-02-07T13:36:55.768079Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2023-05-12","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0196"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-22T00:05:37.666Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0196"}],"timeline":[{"lang":"en","time":"2023-05-12T00:00:00.000Z","value":"CVE-2014-0196 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-04-29T00:00:00.000Z","descriptions":[{"lang":"en","value":"The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-01-05T14:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"USN-2203-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2203-1"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html"},{"name":"106646","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/106646"},{"name":"SUSE-SU-2014:0683","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html"},{"name":"[oss-security] 20140429 CVE-2014-0196: Linux kernel pty layer race condition memory corruption","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2014/05/05/6"},{"name":"59262","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/59262"},{"name":"USN-2204-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2204-1"},{"name":"59218","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/59218"},{"name":"USN-2202-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2202-1"},{"name":"33516","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/33516"},{"name":"DSA-2928","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2014/dsa-2928"},{"name":"USN-2199-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2199-1"},{"tags":["x_refsource_CONFIRM"],"url":"http://linux.oracle.com/errata/ELSA-2014-0771.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094232"},{"name":"USN-2197-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2197-1"},{"tags":["x_refsource_CONFIRM"],"url":"http://source.android.com/security/bulletin/2016-07-01.html"},{"name":"RHSA-2014:0512","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2014-0512.html"},{"name":"59599","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/59599"},{"name":"DSA-2926","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2014/dsa-2926"},{"tags":["x_refsource_CONFIRM"],"url":"https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00"},{"name":"SUSE-SU-2014:0667","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html"},{"tags":["x_refsource_MISC"],"url":"http://pastebin.com/raw.php?i=yTSFUBgZ"},{"tags":["x_refsource_CONFIRM"],"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugzilla.novell.com/show_bug.cgi?id=875690"},{"name":"USN-2198-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2198-1"},{"name":"USN-2200-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2200-1"},{"name":"USN-2201-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2201-1"},{"name":"USN-2196-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2196-1"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2014-0196","datePublished":"2014-05-07T10:00:00.000Z","dateReserved":"2013-12-03T00:00:00.000Z","dateUpdated":"2025-10-22T00:05:37.666Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-05-07 10:55:04","lastModifiedDate":"2026-04-21 20:07:27","problem_types":["CWE-362","n/a","CWE-362 CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartExcluding":"2.6.31","versionEndExcluding":"3.2.59","matchCriteriaId":"FFDB0B31-FFF7-471B-9352-29099002BED7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3","versionEndExcluding":"3.4.91","matchCriteriaId":"992BFD6A-701C-4412-9220-F6C77B4E64F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndExcluding":"3.10.40","matchCriteriaId":"287DC65B-A513-4FB9-A1CF-69F428030DF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.11","versionEndExcluding":"3.12.20","matchCriteriaId":"D82F8C94-5FA7-4A7A-8855-ECF21B3BBD42"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.13","versionEndExcluding":"3.14.4","matchCriteriaId":"9996644C-371E-49B9-A494-733B1EA513EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:*","matchCriteriaId":"2887290A-1B43-4DB9-A9D0-B0B56CD78E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc9:*:*:*:*:*:*","matchCriteriaId":"4B4E132B-A69A-4CD1-B4D9-E17C4361A3AC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*","matchCriteriaId":"8382A145-CDD9-437E-9DE7-A349956778B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*","matchCriteriaId":"8A8E07B7-3739-4BEB-88F8-C7F62431E889"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.3:*:*:*:*:*:*:*","matchCriteriaId":"413CC30E-5FFE-47A4-B38B-80E3A9B13238"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp3:*:*:*:-:*:*","matchCriteriaId":"DD41513F-36F9-459C-A0CB-26C025E63CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension:11:sp3:*:*:*:*:*:*","matchCriteriaId":"B39F3060-6F9E-4F20-8924-FEF5ED8A30CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:-:*:*","matchCriteriaId":"B2866FAF-4340-4EA7-9009-6594ADA27AF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:vmware:*:*","matchCriteriaId":"0EA03350-8702-43D5-8605-5FB765A3F60B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*","matchCriteriaId":"D7B037A8-72A6-4DFF-94B2-D688A5F6F876"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*","matchCriteriaId":"7F61F047-129C-41A6-8A27-FFCBB8563E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.5.1","matchCriteriaId":"8F315708-017C-4362-9C09-6774F89D9370"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"11.3.0","versionEndIncluding":"11.5.1","matchCriteriaId":"48BBEF73-E87D-467F-85EB-47BE212DF0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.5.1","matchCriteriaId":"A430FFB4-418C-43DA-8E17-020618A77A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"11.4.0","versionEndIncluding":"11.5.1","matchCriteriaId":"C483253F-841E-4D4E-9B4A-932E9D07268B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.5.1","matchCriteriaId":"7A0CC74C-6914-4A6F-A1CE-65A695AE31F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.3.0","matchCriteriaId":"9FF30167-0241-4136-82F8-2D2FB545C19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.5.1","matchCriteriaId":"54A45725-FECD-4CA9-BFA4-E13FCDFDDF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.5.1","matchCriteriaId":"8C596B3F-9D93-49D2-99D7-D590CC9AEAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.5.1","matchCriteriaId":"D8696A6B-1B56-43B5-A506-21E17735B9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"11.3.0","versionEndIncluding":"11.5.1","matchCriteriaId":"E9A06D61-E6CB-4A8A-B06D-9FEA1812C167"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.4.1","matchCriteriaId":"8C666A18-9DED-4B49-92DE-474403FC17BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.3.0","matchCriteriaId":"A6B52D60-38DB-4BE9-91F4-B6553F5E5A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1.0","versionEndIncluding":"11.3.0","matchCriteriaId":"E1E3204F-9464-4AC3-819B-D1A6B399FAE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"222B4DE7-1D3D-40DF-A9EB-EFABDA8FAEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"24AEF0B2-7C8C-432C-A840-C2441A70343F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.5.0","matchCriteriaId":"8C8BF865-BA45-4711-829F-EC8E5EA22D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E21D6206-4716-47FE-A733-F18343656E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.5.0","matchCriteriaId":"3BC0EAFD-DA5E-4A1B-81CB-0D5A964F9EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.5.0","matchCriteriaId":"6B3E56EB-202A-4F58-8E94-B2DDA1693498"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:enterprise_manager:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4C580F19-AF18-49EE-89FF-8C4F5C88314D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D5F5FEE7-059A-4A9B-BCCD-18F0AA435040"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"196","Ordinal":"1","Title":"CVE-2014-0196","CVE":"CVE-2014-0196","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"196","Ordinal":"1","NoteData":"The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","Type":"Description","Title":"CVE-2014-0196"},{"CveYear":"2014","CveId":"196","Ordinal":"2","NoteData":"2014-05-07","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"196","Ordinal":"3","NoteData":"2017-01-05","Type":"Other","Title":"Modified"}]}}}