Details of VAR-201405-0243

ID

VAR-201405-0243

CVE

CVE-2014-0196

TITLE

Linux Kernel of drivers/tty/n_tty.c of n_tty_write Service disruption in functions (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-002401

DESCRIPTION

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings. The Linux kernel is prone to a memory-corruption vulnerability. Local attackers can exploit this issue to execute arbitrary code in contexts of the application or corrupt the kernel memory. Failed exploit attempts can result in a denial-of-service condition. Linux kernel 3.0 through versions 3.14.3 are vulnerable. This BID is being retired as a duplicate of BID 67199. The NFSv4 implementation is one of the distributed file system protocols. The vulnerability is caused by the program not properly managing the access rights of the tty driver. CVE-2014-2851 Incorrect reference counting in the ping_init_sock() function allows denial of service or privilege escalation. CVE-2014-3122 Incorrect locking of memory can result in local denial of service. This update also fixes a regression in the isci driver and suspend problems with certain AMD CPUs (introduced in the updated kernel from the Wheezy 7.5 point release). The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-0196 Jiri Slaby discovered a race condition in the pty layer, which could lead to a denial of service or privilege escalation. This could result in a privilege escalation. For the oldstable distribution (squeeze), this problem has been fixed in version 2.6.32-48squeeze6. The following matrix lists additional source packages that were rebuilt for compatibility with or to take advantage of this update: Debian 6.0 (squeeze) user-mode-linux 2.6.32-1um-4+48squeeze6 We recommend that you upgrade your linux-2.6 and user-mode-linux packages. However, given the high frequency at which low-severity security issues are discovered in the kernel and the resource requirements of doing an update, updates for lower priority issues will normally not be released for all kernels at the same time. Rather, they will be released in a staggered or "leap-frog" fashion. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2014:0512-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2014-0512.html Issue date: 2014-05-19 CVE Names: CVE-2014-0196 ===================================================================== 1. Summary: Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 6.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Compute Node EUS (v. 6.3) - noarch, x86_64 Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3) - x86_64 Red Hat Enterprise Linux Server EUS (v. 6.3) - i386, noarch, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 6.3) - i386, ppc64, s390x, x86_64 3. * A race condition flaw, leading to heap-based buffer overflows, was found in the way the Linux kernel's N_TTY line discipline (LDISC) implementation handled concurrent processing of echo output and TTY write operations originating from user space when the underlying TTY driver was PTY. An unprivileged, local user could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-0196, Important) All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system. 5. Bugs fixed (https://bugzilla.redhat.com/): 1094232 - CVE-2014-0196 kernel: pty layer race condition leading to memory corruption 6. Package List: Red Hat Enterprise Linux Compute Node EUS (v. 6.3): Source: kernel-2.6.32-279.43.2.el6.src.rpm noarch: kernel-doc-2.6.32-279.43.2.el6.noarch.rpm kernel-firmware-2.6.32-279.43.2.el6.noarch.rpm x86_64: kernel-2.6.32-279.43.2.el6.x86_64.rpm kernel-debug-2.6.32-279.43.2.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm kernel-debug-devel-2.6.32-279.43.2.el6.x86_64.rpm kernel-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-279.43.2.el6.x86_64.rpm kernel-devel-2.6.32-279.43.2.el6.x86_64.rpm kernel-headers-2.6.32-279.43.2.el6.x86_64.rpm perf-2.6.32-279.43.2.el6.x86_64.rpm perf-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3): Source: kernel-2.6.32-279.43.2.el6.src.rpm x86_64: kernel-debug-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm kernel-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-279.43.2.el6.x86_64.rpm perf-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm python-perf-2.6.32-279.43.2.el6.x86_64.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm Red Hat Enterprise Linux Server EUS (v. 6.3): Source: kernel-2.6.32-279.43.2.el6.src.rpm i386: kernel-2.6.32-279.43.2.el6.i686.rpm kernel-debug-2.6.32-279.43.2.el6.i686.rpm kernel-debug-debuginfo-2.6.32-279.43.2.el6.i686.rpm kernel-debug-devel-2.6.32-279.43.2.el6.i686.rpm kernel-debuginfo-2.6.32-279.43.2.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-279.43.2.el6.i686.rpm kernel-devel-2.6.32-279.43.2.el6.i686.rpm kernel-headers-2.6.32-279.43.2.el6.i686.rpm perf-2.6.32-279.43.2.el6.i686.rpm perf-debuginfo-2.6.32-279.43.2.el6.i686.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.i686.rpm noarch: kernel-doc-2.6.32-279.43.2.el6.noarch.rpm kernel-firmware-2.6.32-279.43.2.el6.noarch.rpm ppc64: kernel-2.6.32-279.43.2.el6.ppc64.rpm kernel-bootwrapper-2.6.32-279.43.2.el6.ppc64.rpm kernel-debug-2.6.32-279.43.2.el6.ppc64.rpm kernel-debug-debuginfo-2.6.32-279.43.2.el6.ppc64.rpm kernel-debug-devel-2.6.32-279.43.2.el6.ppc64.rpm kernel-debuginfo-2.6.32-279.43.2.el6.ppc64.rpm kernel-debuginfo-common-ppc64-2.6.32-279.43.2.el6.ppc64.rpm kernel-devel-2.6.32-279.43.2.el6.ppc64.rpm kernel-headers-2.6.32-279.43.2.el6.ppc64.rpm perf-2.6.32-279.43.2.el6.ppc64.rpm perf-debuginfo-2.6.32-279.43.2.el6.ppc64.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.ppc64.rpm s390x: kernel-2.6.32-279.43.2.el6.s390x.rpm kernel-debug-2.6.32-279.43.2.el6.s390x.rpm kernel-debug-debuginfo-2.6.32-279.43.2.el6.s390x.rpm kernel-debug-devel-2.6.32-279.43.2.el6.s390x.rpm kernel-debuginfo-2.6.32-279.43.2.el6.s390x.rpm kernel-debuginfo-common-s390x-2.6.32-279.43.2.el6.s390x.rpm kernel-devel-2.6.32-279.43.2.el6.s390x.rpm kernel-headers-2.6.32-279.43.2.el6.s390x.rpm kernel-kdump-2.6.32-279.43.2.el6.s390x.rpm kernel-kdump-debuginfo-2.6.32-279.43.2.el6.s390x.rpm kernel-kdump-devel-2.6.32-279.43.2.el6.s390x.rpm perf-2.6.32-279.43.2.el6.s390x.rpm perf-debuginfo-2.6.32-279.43.2.el6.s390x.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.s390x.rpm x86_64: kernel-2.6.32-279.43.2.el6.x86_64.rpm kernel-debug-2.6.32-279.43.2.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm kernel-debug-devel-2.6.32-279.43.2.el6.x86_64.rpm kernel-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-279.43.2.el6.x86_64.rpm kernel-devel-2.6.32-279.43.2.el6.x86_64.rpm kernel-headers-2.6.32-279.43.2.el6.x86_64.rpm perf-2.6.32-279.43.2.el6.x86_64.rpm perf-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm Red Hat Enterprise Linux Server Optional EUS (v. 6.3): Source: kernel-2.6.32-279.43.2.el6.src.rpm i386: kernel-debug-debuginfo-2.6.32-279.43.2.el6.i686.rpm kernel-debuginfo-2.6.32-279.43.2.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-279.43.2.el6.i686.rpm perf-debuginfo-2.6.32-279.43.2.el6.i686.rpm python-perf-2.6.32-279.43.2.el6.i686.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.i686.rpm ppc64: kernel-debug-debuginfo-2.6.32-279.43.2.el6.ppc64.rpm kernel-debuginfo-2.6.32-279.43.2.el6.ppc64.rpm kernel-debuginfo-common-ppc64-2.6.32-279.43.2.el6.ppc64.rpm perf-debuginfo-2.6.32-279.43.2.el6.ppc64.rpm python-perf-2.6.32-279.43.2.el6.ppc64.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.ppc64.rpm s390x: kernel-debug-debuginfo-2.6.32-279.43.2.el6.s390x.rpm kernel-debuginfo-2.6.32-279.43.2.el6.s390x.rpm kernel-debuginfo-common-s390x-2.6.32-279.43.2.el6.s390x.rpm kernel-kdump-debuginfo-2.6.32-279.43.2.el6.s390x.rpm perf-debuginfo-2.6.32-279.43.2.el6.s390x.rpm python-perf-2.6.32-279.43.2.el6.s390x.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.s390x.rpm x86_64: kernel-debug-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm kernel-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-279.43.2.el6.x86_64.rpm perf-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm python-perf-2.6.32-279.43.2.el6.x86_64.rpm python-perf-debuginfo-2.6.32-279.43.2.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://www.redhat.com/security/data/cve/CVE-2014-0196.html https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFTeevHXlSAg2UNWIIRAra4AKCEmAyOKgOMKTcKEcfb2+w6TC/mFwCfWvev EOGe9kl4ZMaNGsVrs9ShD4E= =vPRc -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . ============================================================================ Ubuntu Security Notice USN-2227-1 May 27, 2014 linux-ti-omap4 vulnerabilities ============================================================================ A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: Several security issues were fixed in the kernel. (CVE-2014-0196) Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. (CVE-2014-1738) Matthew Daley reported a flaw in the handling of ioctl commands by the floppy disk driver in the Linux kernel. (CVE-2014-1737) A flaw was discovered in the Linux kernel's IPC reference counting. (CVE-2013-4483) Al Viro discovered an error in how CIFS in the Linux kernel handles uncached write operations. (CVE-2014-0069) A flaw was discovered in the handling of network packets when mergeable buffers are disabled for virtual machines in the Linux kernel. Guest OS users may exploit this flaw to cause a denial of service (host OS crash) or possibly gain privilege on the host OS. (CVE-2014-0077) A flaw was discovered in the Linux kernel's handling of the SCTP handshake. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2014-0101) A flaw was discovered in the handling of routing information in Linux kernel's IPv6 stack. A remote attacker could exploit this flaw to cause a denial of service (memory consumption) via a flood of ICMPv6 router advertisement packets. (CVE-2014-2309) An error was discovered in the Linux kernel's DCCP protocol support. (CVE-2014-2523) Max Sydorenko discovered a race condition in the Atheros 9k wireless driver in the Linux kernel. This race could be exploited by remote attackers to cause a denial of service (system crash). (CVE-2014-2672) An error was discovered in the Reliable Datagram Sockets (RDS) protocol stack in the Linux kernel. (CVE-2014-2678) Yaara Rozenblum discovered a race condition in the Linux kernel's Generic IEEE 802.11 Networking Stack (mac80211). Remote attackers could exploit this flaw to cause a denial of service (system crash). (CVE-2014-2706) A flaw was discovered in the Linux kernel's ping sockets. (CVE-2014-2851) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.2.0-1446-omap4 3.2.0-1446.65 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well

Trust: 2.7

sources: NVD: CVE-2014-0196 // JVNDB: JVNDB-2014-002401 // BID: 67282 // VULHUB: VHN-67689 // VULMON: CVE-2014-0196 // PACKETSTORM: 126578 // PACKETSTORM: 126624 // PACKETSTORM: 126712 // PACKETSTORM: 126800 // PACKETSTORM: 126509 // PACKETSTORM: 126507 // PACKETSTORM: 126510

AFFECTED PRODUCTS

vendor:	f5	model:	big-ip application security manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-ip wan optimization manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	12.10	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	6.3	Trust: 1.0
vendor:	redhat	model:	enterprise linux	scope:	eq	version:	6.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	gte	version:	11.4.0	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	7.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-iq security	scope:	gte	version:	4.0.0	Trust: 1.0
vendor:	suse	model:	linux enterprise high availability extension	scope:	eq	version:	11	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-iq cloud	scope:	lte	version:	4.5.0	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	6.0	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	10.04	Trust: 1.0
vendor:	f5	model:	big-ip edge gateway	scope:	lte	version:	11.3.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gt	version:	2.6.31	Trust: 1.0
vendor:	f5	model:	big-ip edge gateway	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.4.91	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	12.04	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	gte	version:	11.3.0	Trust: 1.0
vendor:	f5	model:	enterprise manager	scope:	eq	version:	3.1.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-iq device	scope:	gte	version:	4.2.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.3	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	gte	version:	11.3.0	Trust: 1.0
vendor:	f5	model:	big-ip webaccelerator	scope:	lte	version:	11.3.0	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-iq centralized management	scope:	eq	version:	4.6.0	Trust: 1.0
vendor:	f5	model:	big-iq security	scope:	lte	version:	4.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	14.04	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	13.10	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.5	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	oracle	model:	linux	scope:	eq	version:	6	Trust: 1.0
vendor:	f5	model:	big-iq cloud and orchestration	scope:	eq	version:	1.0.0	Trust: 1.0
vendor:	f5	model:	big-iq cloud	scope:	gte	version:	4.0.0	Trust: 1.0
vendor:	f5	model:	big-iq device	scope:	lte	version:	4.5.0	Trust: 1.0
vendor:	f5	model:	big-ip wan optimization manager	scope:	lte	version:	11.3.0	Trust: 1.0
vendor:	f5	model:	enterprise manager	scope:	eq	version:	3.1.1	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.14.4	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	redhat	model:	enterprise linux server eus	scope:	eq	version:	6.3	Trust: 1.0
vendor:	suse	model:	linux enterprise desktop	scope:	eq	version:	11	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.13	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	6.4	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	lte	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip webaccelerator	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.12.20	Trust: 1.0
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	11	Trust: 1.0
vendor:	f5	model:	big-iq application delivery controller	scope:	eq	version:	4.5.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.10.40	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.11	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.2.59	Trust: 1.0
vendor:	linux	model:	kernel	scope:	eq	version:	2.6.31	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lte	version:	3.14.3	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.55	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.2.7	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.56	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.61	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.64	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.60	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.62	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.63	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.53	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.54	Trust: 0.6
vendor:	linux	model:	kernel	scope:	eq	version:	3.3.5	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.3.4	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.3.2	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.2.13	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.2.9	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.2.1	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.1.8	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.5	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.4	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.2	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.1	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.2.2	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.0.18	Trust: 0.3
vendor:	linux	model:	kernel 3.0-rc1	scope:	-	version:	-	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	3.0	Trust: 0.3
vendor:	debian	model:	linux sparc	scope:	eq	version:	6.0	Trust: 0.3
vendor:	debian	model:	linux s/390	scope:	eq	version:	6.0	Trust: 0.3
vendor:	debian	model:	linux powerpc	scope:	eq	version:	6.0	Trust: 0.3
vendor:	debian	model:	linux mips	scope:	eq	version:	6.0	Trust: 0.3
vendor:	debian	model:	linux ia-64	scope:	eq	version:	6.0	Trust: 0.3
vendor:	debian	model:	linux ia-32	scope:	eq	version:	6.0	Trust: 0.3
vendor:	debian	model:	linux arm	scope:	eq	version:	6.0	Trust: 0.3
vendor:	debian	model:	linux amd64	scope:	eq	version:	6.0	Trust: 0.3

sources: BID: 67282 // JVNDB: JVNDB-2014-002401 // CNNVD: CNNVD-201405-092 // NVD: CVE-2014-0196

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2014-0196
value:	MEDIUM
Trust: 1.0
134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2014-0196
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2014-0196
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201405-092
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-67689
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2014-0196
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2014-0196
severity:	MEDIUM
baseScore:	6.9
vectorString:	AV:L/AC:M/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.4
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-67689
severity:	MEDIUM
baseScore:	6.9
vectorString:	AV:L/AC:M/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.4
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2014-0196
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0

sources: VULHUB: VHN-67689 // VULMON: CVE-2014-0196 // JVNDB: JVNDB-2014-002401 // CNNVD: CNNVD-201405-092 // NVD: CVE-2014-0196 // NVD: CVE-2014-0196

PROBLEMTYPE DATA

problemtype:

CWE-362

Trust: 1.9

sources: VULHUB: VHN-67689 // JVNDB: JVNDB-2014-002401 // NVD: CVE-2014-0196

THREAT TYPE

local

Trust: 1.1

sources: BID: 67282 // PACKETSTORM: 126712 // PACKETSTORM: 126800 // CNNVD: CNNVD-201405-092

TYPE

competition condition problem

Trust: 0.6

sources: CNNVD: CNNVD-201405-092

CONFIGURATIONS

sources: JVNDB: JVNDB-2014-002401

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-67689 // VULMON: CVE-2014-0196

PATCH

title:	Bug 875690	url:	https://bugzilla.novell.com/show_bug.cgi?id=875690	Trust: 0.8
title:	n_tty: Fix n_tty_write crash when echoing in raw mode	url:	https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00	Trust: 0.8
title:	Linux Kernel Archives	url:	http://www.kernel.org	Trust: 0.8
title:	n_tty: Fix n_tty_write crash when echoing in raw mode	url:	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4291086b1f081b869c6d79e5b7441633dc3ace00	Trust: 0.8
title:	ELSA-2014-0771	url:	http://linux.oracle.com/errata/ELSA-2014-0771.html	Trust: 0.8
title:	Bug 1094232	url:	https://bugzilla.redhat.com/show_bug.cgi?id=1094232	Trust: 0.8
title:	RHSA-2014:0512	url:	https://rhn.redhat.com/errata/RHSA-2014-0512.html	Trust: 0.8
title:	linux-3.14.4	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=49773	Trust: 0.6
title:	linux-3.14.4	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=49772	Trust: 0.6
title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2204-1	Trust: 0.1
title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2203-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-lts-quantal vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2199-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-ec2 vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2197-1	Trust: 0.1
title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2196-1	Trust: 0.1
title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2198-1	Trust: 0.1
title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2202-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-lts-saucy vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2201-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-lts-raring vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2200-1	Trust: 0.1
title:	Red Hat: CVE-2014-0196	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2014-0196	Trust: 0.1
title:	Amazon Linux AMI: ALAS-2014-339	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2014-339	Trust: 0.1
title:	Amazon Linux AMI: ALAS-2014-392	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2014-392	Trust: 0.1
title:	Debian CVElist Bug Report Logs: CVE-2014-3122: try_to_unmap_cluster() should lock_page() before mlocking	url:	https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=e518c00ae2addd2c6e5ede8febf60365	Trust: 0.1
title:	Debian CVElist Bug Report Logs: CVE-2014-0196: pty layer race condition memory corruption	url:	https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=47961f3c5321e4c0c1841969631cdf51	Trust: 0.1
title:	Ubuntu Security Notice: linux-lts-trusty vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2260-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-ti-omap4 vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2227-1	Trust: 0.1
title:	https://github.com/SunRain/CVE-2014-0196	url:	https://github.com/SunRain/CVE-2014-0196	Trust: 0.1
title:	kernel Exploitation	url:	https://github.com/ex4722/kernel_exploitation	Trust: 0.1
title:	CVE-2014-0196	url:	https://github.com/tempbottle/CVE-2014-0196	Trust: 0.1
title:	Exploits	url:	https://github.com/ycdxsb/Exploits	Trust: 0.1
title:	Exploits	url:	https://github.com/ycdxsb/CVEs	Trust: 0.1
title:	Exploit Development: Case Studies Windows Unix-like	url:	https://github.com/dyjakan/exploit-development-case-studies	Trust: 0.1
title:	kernelpop run modes	url:	https://github.com/ferovap/Tools	Trust: 0.1
title:	kernelpop usage	url:	https://github.com/spencerdodd/kernelpop	Trust: 0.1
title:	https://github.com/20142995/pocsuite	url:	https://github.com/20142995/pocsuite	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/p00h00/linux-exploits	Trust: 0.1
title:	Localroot Exploit	url:	https://github.com/anoaghost/Localroot_Compile	Trust: 0.1
title:	Android kernel exploit	url:	https://github.com/tangsilian/android-vuln	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/Shadowshusky/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/Feng4/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/coffee727/linux-exp	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/copperfieldd/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/m0mkris/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/C0dak/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/password520/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/xssfile/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/qiantu88/Linux--exp	Trust: 0.1
title:	Linux-Kernel-Exploit	url:	https://github.com/ozkanbilge/Linux-Kernel-Exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/s0wr0b1ndef/Linux-Kernal-Exploits-m-	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/zyjsuper/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/albinjoshy03/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/kumardineshwar/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/Straight-wood/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/SecWiki/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/yige666/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/QChiLan/linux-exp	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/xfinest/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/alian87/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/Micr067/linux-kernel-exploits	Trust: 0.1
title:	https://github.com/fei9747/LinuxEelvation	url:	https://github.com/fei9747/LinuxEelvation	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/De4dCr0w/Linux-kernel-EoP-exp	Trust: 0.1
title:	Linux-Kernel-exploit	url:	https://github.com/skbasava/Linux-Kernel-exploit	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/Technoashofficial/kernel-exploitation-linux	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/s0wr0b1ndef/linux-kernel-exploitation	Trust: 0.1
title:	https://github.com/Al1ex/LinuxEelvation	url:	https://github.com/Al1ex/LinuxEelvation	Trust: 0.1
title:	Localroot Collection ✨	url:	https://github.com/Snoopy-Sec/Localroot-ALL-CVE	Trust: 0.1
title:	Linux Privilege Escalation Exploits	url:	https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits	Trust: 0.1
title:	所有收集类项目 Android 目录资源收集知名分析工具各类App Topic 其他工具文章贡献	url:	https://github.com/alphaSeclab/android-security	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/TamilHackz/linux-kernel-exploitation	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/khanhdz191/linux-kernel-exploitation	Trust: 0.1
title:	Contents	url:	https://github.com/hktalent/bug-bounty	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/xairy/linux-kernel-exploitation	Trust: 0.1
title:	Known Exploited Vulnerabilities Detector	url:	https://github.com/Ostorlab/KEV	Trust: 0.1
title:	Securelist	url:	https://securelist.com/elasticsearch-vuln-abuse-on-amazon-cloud-and-more-for-ddos-and-profit/65192/	Trust: 0.1
title:	The Register	url:	https://www.theregister.co.uk/2014/07/25/how_long_is_too_long_to_wait_for_a_security_update/	Trust: 0.1
title:	The Register	url:	https://www.theregister.co.uk/2014/05/14/linux_distos_get_patching_on_terminal_bug/	Trust: 0.1

sources: VULMON: CVE-2014-0196 // JVNDB: JVNDB-2014-002401 // CNNVD: CNNVD-201405-092

EXTERNAL IDS

db:	NVD	id:	CVE-2014-0196	Trust: 3.6
db:	OSVDB	id:	106646	Trust: 1.8
db:	SECUNIA	id:	59218	Trust: 1.8
db:	SECUNIA	id:	59262	Trust: 1.8
db:	SECUNIA	id:	59599	Trust: 1.8
db:	EXPLOIT-DB	id:	33516	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2014/05/05/6	Trust: 1.8
db:	JVNDB	id:	JVNDB-2014-002401	Trust: 0.8
db:	CNNVD	id:	CNNVD-201405-092	Trust: 0.7
db:	BID	id:	67282	Trust: 0.3
db:	PACKETSTORM	id:	126712	Trust: 0.2
db:	PACKETSTORM	id:	126509	Trust: 0.2
db:	PACKETSTORM	id:	126510	Trust: 0.2
db:	PACKETSTORM	id:	126624	Trust: 0.2
db:	PACKETSTORM	id:	126578	Trust: 0.2
db:	PACKETSTORM	id:	126507	Trust: 0.2
db:	PACKETSTORM	id:	126512	Trust: 0.1
db:	PACKETSTORM	id:	126508	Trust: 0.1
db:	PACKETSTORM	id:	126603	Trust: 0.1
db:	PACKETSTORM	id:	126511	Trust: 0.1
db:	PACKETSTORM	id:	126503	Trust: 0.1
db:	PACKETSTORM	id:	127035	Trust: 0.1
db:	PACKETSTORM	id:	126506	Trust: 0.1
db:	PACKETSTORM	id:	126500	Trust: 0.1
db:	SEEBUG	id:	SSVID-86729	Trust: 0.1
db:	VULHUB	id:	VHN-67689	Trust: 0.1
db:	VULMON	id:	CVE-2014-0196	Trust: 0.1
db:	PACKETSTORM	id:	126800	Trust: 0.1

sources: VULHUB: VHN-67689 // VULMON: CVE-2014-0196 // BID: 67282 // PACKETSTORM: 126578 // PACKETSTORM: 126624 // PACKETSTORM: 126712 // PACKETSTORM: 126800 // PACKETSTORM: 126509 // PACKETSTORM: 126507 // PACKETSTORM: 126510 // JVNDB: JVNDB-2014-002401 // CNNVD: CNNVD-201405-092 // NVD: CVE-2014-0196

REFERENCES

url:	https://bugzilla.redhat.com/show_bug.cgi?id=1094232	Trust: 2.1
url:	http://rhn.redhat.com/errata/rhsa-2014-0512.html	Trust: 1.9
url:	http://www.ubuntu.com/usn/usn-2199-1	Trust: 1.9
url:	http://www.ubuntu.com/usn/usn-2201-1	Trust: 1.9
url:	http://www.ubuntu.com/usn/usn-2202-1	Trust: 1.9
url:	http://www.osvdb.org/106646	Trust: 1.8
url:	http://www.exploit-db.com/exploits/33516	Trust: 1.8
url:	http://secunia.com/advisories/59218	Trust: 1.8
url:	http://secunia.com/advisories/59262	Trust: 1.8
url:	http://secunia.com/advisories/59599	Trust: 1.8
url:	http://www.debian.org/security/2014/dsa-2926	Trust: 1.8
url:	http://www.debian.org/security/2014/dsa-2928	Trust: 1.8
url:	http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html	Trust: 1.8
url:	http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html	Trust: 1.8
url:	http://www.ubuntu.com/usn/usn-2196-1	Trust: 1.8
url:	http://www.ubuntu.com/usn/usn-2197-1	Trust: 1.8
url:	http://www.ubuntu.com/usn/usn-2198-1	Trust: 1.8
url:	http://www.ubuntu.com/usn/usn-2200-1	Trust: 1.8
url:	http://www.ubuntu.com/usn/usn-2203-1	Trust: 1.8
url:	http://www.ubuntu.com/usn/usn-2204-1	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2014/05/05/6	Trust: 1.8
url:	http://bugzilla.novell.com/show_bug.cgi?id=875690	Trust: 1.8
url:	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3ba=commit%3bh=4291086b1f081b869c6d79e5b7441633dc3ace00	Trust: 1.8
url:	http://linux.oracle.com/errata/elsa-2014-0771.html	Trust: 1.8
url:	http://pastebin.com/raw.php?i=ytsfubgz	Trust: 1.8
url:	http://source.android.com/security/bulletin/2016-07-01.html	Trust: 1.8
url:	http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html	Trust: 1.8
url:	https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00	Trust: 1.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-0196	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-0196	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2014-0196	Trust: 0.7
url:	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4291086b1f081b869c6d79e5b7441633dc3ace00	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2014-0196	Trust: 0.4
url:	http://www.kernel.org/	Trust: 0.3
url:	http://linux.oracle.com/errata/elsa-2014-3034.html	Trust: 0.3
url:	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4291086b1f081b869c6d79e5b7441633dc3ace00	Trust: 0.3
url:	http://bugzillafiles.novell.org/attachment.cgi?id=588355	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2014-1738	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2014-1737	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2851	Trust: 0.2
url:	http://www.debian.org/security/faq	Trust: 0.2
url:	http://www.debian.org/security/	Trust: 0.2
url:	https://cwe.mitre.org/data/definitions/362.html	Trust: 0.1
url:	https://www.exploit-db.com/exploits/33516/	Trust: 0.1
url:	https://github.com/sunrain/cve-2014-0196	Trust: 0.1
url:	https://github.com/tempbottle/cve-2014-0196	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://usn.ubuntu.com/2204-1/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-3122	Trust: 0.1
url:	https://www.redhat.com/security/data/cve/cve-2014-0196.html	Trust: 0.1
url:	https://www.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.1
url:	https://access.redhat.com/security/team/key/#package	Trust: 0.1
url:	https://access.redhat.com/site/articles/11258	Trust: 0.1
url:	https://bugzilla.redhat.com/):	Trust: 0.1
url:	https://access.redhat.com/security/team/contact/	Trust: 0.1
url:	https://access.redhat.com/security/updates/classification/#important	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2706	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-0069	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0-1446.65	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-0101	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-4483	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2309	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2678	Trust: 0.1
url:	http://www.ubuntu.com/usn/usn-2227-1	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2672	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2523	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-0077	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-lts-saucy/3.11.0-20.35~precise1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-lts-quantal/3.5.0-49.74~precise1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux/3.5.0-49.74	Trust: 0.1

CREDITS

Ubuntu

Trust: 0.4

sources: PACKETSTORM: 126800 // PACKETSTORM: 126509 // PACKETSTORM: 126507 // PACKETSTORM: 126510

SOURCES

db:	VULHUB	id:	VHN-67689
db:	VULMON	id:	CVE-2014-0196
db:	BID	id:	67282
db:	PACKETSTORM	id:	126578
db:	PACKETSTORM	id:	126624
db:	PACKETSTORM	id:	126712
db:	PACKETSTORM	id:	126800
db:	PACKETSTORM	id:	126509
db:	PACKETSTORM	id:	126507
db:	PACKETSTORM	id:	126510
db:	JVNDB	id:	JVNDB-2014-002401
db:	CNNVD	id:	CNNVD-201405-092
db:	NVD	id:	CVE-2014-0196

LAST UPDATE DATE

2025-08-11T20:44:06.176000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-67689	date:	2023-02-13T00:00:00
db:	VULMON	id:	CVE-2014-0196	date:	2024-02-09T00:00:00
db:	BID	id:	67282	date:	2015-05-07T17:09:00
db:	JVNDB	id:	JVNDB-2014-002401	date:	2014-07-28T00:00:00
db:	CNNVD	id:	CNNVD-201405-092	date:	2023-02-13T00:00:00
db:	NVD	id:	CVE-2014-0196	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-67689	date:	2014-05-07T00:00:00
db:	VULMON	id:	CVE-2014-0196	date:	2014-05-07T00:00:00
db:	BID	id:	67282	date:	2014-04-29T00:00:00
db:	PACKETSTORM	id:	126578	date:	2014-05-12T18:50:56
db:	PACKETSTORM	id:	126624	date:	2014-05-15T21:36:02
db:	PACKETSTORM	id:	126712	date:	2014-05-19T17:02:25
db:	PACKETSTORM	id:	126800	date:	2014-05-27T16:02:18
db:	PACKETSTORM	id:	126509	date:	2014-05-06T20:24:30
db:	PACKETSTORM	id:	126507	date:	2014-05-06T20:24:17
db:	PACKETSTORM	id:	126510	date:	2014-05-06T20:24:36
db:	JVNDB	id:	JVNDB-2014-002401	date:	2014-05-08T00:00:00
db:	CNNVD	id:	CNNVD-201405-092	date:	2014-05-08T00:00:00
db:	NVD	id:	CVE-2014-0196	date:	2014-05-07T10:55:04.337