CVE-2014-0196

5.5

CVSS
Medium

PUBLISHED

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO &...

Exploited in the wild Low complexity No user interaction

Vendor: Linux
Product: kernel
Published: May 07, 2014
EPSS: —

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

linux cisa nessus_scanner

CVSS scores

CVSS v3.1 5.5 Medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0 6.9

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitation status

Exploited in the wild

Recorded 2023-05-12 00:00:00 UTC · Source

SSVC decision points

Exploitation: active
Automatable: No
Technical impact: partial

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CISA	May 12, 2023

Scanner integrations

Scanner	Reference	Detected
Nessus	https://www.tenable.com/plugins/nessus/124986	Jun 02, 2025

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

tempbottle/CVE-2014-0196

github · Created 2014-12-17 07:39:00 UTC · 3 stars

CVE-2014-0196: Linux kernel pty layer race condition memory corruption

SunRain/CVE-2014-0196

github · Created 2014-05-13 12:34:51 UTC · 0 stars

Vulnerability detail