Details of VAR-201405-0243

ID

VAR-201405-0243

CVE

CVE-2014-0196

TITLE

Red Hat Security Advisory 2014-0512-01

Trust: 0.1

sources: PACKETSTORM: 126712

DESCRIPTION

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings. The NFSv4 implementation is one of the distributed file system protocols. There is a security vulnerability in the 'n_tty_write' function in the drivers/tty/n_tty.c file of Linux kernel 3.14.3 and earlier versions. The vulnerability is caused by the program not properly managing the access rights of the tty driver. 6.3) - i386, ppc64, s390x, x86_64 3. ============================================================================ Ubuntu Security Notice USN-2227-1 May 27, 2014 linux-ti-omap4 vulnerabilities ============================================================================ A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: Several security issues were fixed in the kernel. (CVE-2014-0196) Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. (CVE-2014-1738) Matthew Daley reported a flaw in the handling of ioctl commands by the floppy disk driver in the Linux kernel. (CVE-2014-1737) A flaw was discovered in the Linux kernel's IPC reference counting. (CVE-2013-4483) Al Viro discovered an error in how CIFS in the Linux kernel handles uncached write operations. (CVE-2014-0069) A flaw was discovered in the handling of network packets when mergeable buffers are disabled for virtual machines in the Linux kernel. Guest OS users may exploit this flaw to cause a denial of service (host OS crash) or possibly gain privilege on the host OS. (CVE-2014-0077) A flaw was discovered in the Linux kernel's handling of the SCTP handshake. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2014-0101) A flaw was discovered in the handling of routing information in Linux kernel's IPv6 stack. A remote attacker could exploit this flaw to cause a denial of service (memory consumption) via a flood of ICMPv6 router advertisement packets. (CVE-2014-2309) An error was discovered in the Linux kernel's DCCP protocol support. A remote attacked could exploit this flaw to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2014-2523) Max Sydorenko discovered a race condition in the Atheros 9k wireless driver in the Linux kernel. This race could be exploited by remote attackers to cause a denial of service (system crash). (CVE-2014-2672) An error was discovered in the Reliable Datagram Sockets (RDS) protocol stack in the Linux kernel. (CVE-2014-2678) Yaara Rozenblum discovered a race condition in the Linux kernel's Generic IEEE 802.11 Networking Stack (mac80211). Remote attackers could exploit this flaw to cause a denial of service (system crash). (CVE-2014-2706) A flaw was discovered in the Linux kernel's ping sockets. (CVE-2014-2851) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.2.0-1446-omap4 3.2.0-1446.65 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2014:0678-02 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2014-0678.html Issue date: 2014-06-10 CVE Names: CVE-2014-0196 ===================================================================== 1. Summary: Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - noarch, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - noarch, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. * A race condition flaw, leading to heap-based buffer overflows, was found in the way the Linux kernel's N_TTY line discipline (LDISC) implementation handled concurrent processing of echo output and TTY write operations originating from user space when the underlying TTY driver was PTY. An unprivileged, local user could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-0196, Important) All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system. 5. Bugs fixed (https://bugzilla.redhat.com/): 1094232 - CVE-2014-0196 kernel: pty layer race condition leading to memory corruption 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: kernel-3.10.0-123.1.2.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-123.1.2.el7.noarch.rpm x86_64: kernel-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-devel-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-123.1.2.el7.x86_64.rpm kernel-devel-3.10.0-123.1.2.el7.x86_64.rpm kernel-headers-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-libs-3.10.0-123.1.2.el7.x86_64.rpm perf-3.10.0-123.1.2.el7.x86_64.rpm perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): noarch: kernel-doc-3.10.0-123.1.2.el7.noarch.rpm x86_64: kernel-debug-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-123.1.2.el7.x86_64.rpm perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm python-perf-3.10.0-123.1.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: kernel-3.10.0-123.1.2.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-123.1.2.el7.noarch.rpm x86_64: kernel-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-devel-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-123.1.2.el7.x86_64.rpm kernel-devel-3.10.0-123.1.2.el7.x86_64.rpm kernel-headers-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-libs-3.10.0-123.1.2.el7.x86_64.rpm perf-3.10.0-123.1.2.el7.x86_64.rpm perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): noarch: kernel-doc-3.10.0-123.1.2.el7.noarch.rpm x86_64: kernel-debug-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-123.1.2.el7.x86_64.rpm perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm python-perf-3.10.0-123.1.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: kernel-3.10.0-123.1.2.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-123.1.2.el7.noarch.rpm ppc64: kernel-3.10.0-123.1.2.el7.ppc64.rpm kernel-bootwrapper-3.10.0-123.1.2.el7.ppc64.rpm kernel-debug-3.10.0-123.1.2.el7.ppc64.rpm kernel-debug-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm kernel-debug-devel-3.10.0-123.1.2.el7.ppc64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-123.1.2.el7.ppc64.rpm kernel-devel-3.10.0-123.1.2.el7.ppc64.rpm kernel-headers-3.10.0-123.1.2.el7.ppc64.rpm kernel-tools-3.10.0-123.1.2.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm kernel-tools-libs-3.10.0-123.1.2.el7.ppc64.rpm perf-3.10.0-123.1.2.el7.ppc64.rpm perf-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm s390x: kernel-3.10.0-123.1.2.el7.s390x.rpm kernel-debug-3.10.0-123.1.2.el7.s390x.rpm kernel-debug-debuginfo-3.10.0-123.1.2.el7.s390x.rpm kernel-debug-devel-3.10.0-123.1.2.el7.s390x.rpm kernel-debuginfo-3.10.0-123.1.2.el7.s390x.rpm kernel-debuginfo-common-s390x-3.10.0-123.1.2.el7.s390x.rpm kernel-devel-3.10.0-123.1.2.el7.s390x.rpm kernel-headers-3.10.0-123.1.2.el7.s390x.rpm kernel-kdump-3.10.0-123.1.2.el7.s390x.rpm kernel-kdump-debuginfo-3.10.0-123.1.2.el7.s390x.rpm kernel-kdump-devel-3.10.0-123.1.2.el7.s390x.rpm perf-3.10.0-123.1.2.el7.s390x.rpm perf-debuginfo-3.10.0-123.1.2.el7.s390x.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.s390x.rpm x86_64: kernel-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-devel-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-123.1.2.el7.x86_64.rpm kernel-devel-3.10.0-123.1.2.el7.x86_64.rpm kernel-headers-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-libs-3.10.0-123.1.2.el7.x86_64.rpm perf-3.10.0-123.1.2.el7.x86_64.rpm perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): noarch: kernel-doc-3.10.0-123.1.2.el7.noarch.rpm ppc64: kernel-debug-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-123.1.2.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm kernel-tools-libs-devel-3.10.0-123.1.2.el7.ppc64.rpm perf-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm python-perf-3.10.0-123.1.2.el7.ppc64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.ppc64.rpm s390x: kernel-debug-debuginfo-3.10.0-123.1.2.el7.s390x.rpm kernel-debuginfo-3.10.0-123.1.2.el7.s390x.rpm kernel-debuginfo-common-s390x-3.10.0-123.1.2.el7.s390x.rpm kernel-kdump-debuginfo-3.10.0-123.1.2.el7.s390x.rpm perf-debuginfo-3.10.0-123.1.2.el7.s390x.rpm python-perf-3.10.0-123.1.2.el7.s390x.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.s390x.rpm x86_64: kernel-debug-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-123.1.2.el7.x86_64.rpm perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm python-perf-3.10.0-123.1.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: kernel-3.10.0-123.1.2.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-123.1.2.el7.noarch.rpm x86_64: kernel-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debug-devel-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-123.1.2.el7.x86_64.rpm kernel-devel-3.10.0-123.1.2.el7.x86_64.rpm kernel-headers-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-libs-3.10.0-123.1.2.el7.x86_64.rpm perf-3.10.0-123.1.2.el7.x86_64.rpm perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): noarch: kernel-doc-3.10.0-123.1.2.el7.noarch.rpm x86_64: kernel-debug-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-123.1.2.el7.x86_64.rpm perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm python-perf-3.10.0-123.1.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-123.1.2.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://www.redhat.com/security/data/cve/CVE-2014-0196.html https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFTl13yXlSAg2UNWIIRAlcRAJ9jfcysxf2wwpamOHxZ1xkvfhfNQACcD3cV COm6ik75/ztcYx+xwi0ACr8= =YLol -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . (CVE-2014-2851) Sasha Levin reported a bug in the Linux kernel's virtual memory management subsystem

Trust: 1.71

sources: NVD: CVE-2014-0196 // VULHUB: VHN-67689 // VULMON: CVE-2014-0196 // PACKETSTORM: 126712 // PACKETSTORM: 126800 // PACKETSTORM: 126507 // PACKETSTORM: 126503 // PACKETSTORM: 126512 // PACKETSTORM: 127035 // PACKETSTORM: 127253

AFFECTED PRODUCTS

vendor:	f5	model:	big-ip local traffic manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-iq centralized management	scope:	eq	version:	4.6.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	12.04	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.11	Trust: 1.0
vendor:	f5	model:	big-iq cloud	scope:	lte	version:	4.5.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip webaccelerator	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-iq device	scope:	gte	version:	4.2.0	Trust: 1.0
vendor:	suse	model:	linux enterprise high availability extension	scope:	eq	version:	11	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.5	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	gte	version:	11.3.0	Trust: 1.0
vendor:	f5	model:	big-ip wan optimization manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	enterprise manager	scope:	eq	version:	3.1.1	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-ip edge gateway	scope:	lte	version:	11.3.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	eq	version:	2.6.31	Trust: 1.0
vendor:	suse	model:	linux enterprise desktop	scope:	eq	version:	11	Trust: 1.0
vendor:	f5	model:	big-iq device	scope:	lte	version:	4.5.0	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	10.04	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-ip webaccelerator	scope:	lte	version:	11.3.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	enterprise manager	scope:	eq	version:	3.1.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux	scope:	eq	version:	6.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-iq security	scope:	gte	version:	4.0.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.3	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	oracle	model:	linux	scope:	eq	version:	6	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	7.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.13	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	lte	version:	11.4.1	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	12.10	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.14.4	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.2.59	Trust: 1.0
vendor:	f5	model:	big-iq application delivery controller	scope:	eq	version:	4.5.0	Trust: 1.0
vendor:	f5	model:	big-iq security	scope:	lte	version:	4.5.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	6.4	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	13.10	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	14.04	Trust: 1.0
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	11	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip wan optimization manager	scope:	lte	version:	11.3.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux server eus	scope:	eq	version:	6.3	Trust: 1.0
vendor:	f5	model:	big-ip edge gateway	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	f5	model:	big-iq cloud	scope:	gte	version:	4.0.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	6.3	Trust: 1.0
vendor:	f5	model:	big-iq cloud and orchestration	scope:	eq	version:	1.0.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.10.40	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gt	version:	2.6.31	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	6.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	gte	version:	11.3.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	gte	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	gte	version:	11.1.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.4.91	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	lte	version:	11.5.1	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.12.20	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	lte	version:	11.5.1	Trust: 1.0

sources: NVD: CVE-2014-0196

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2014-0196
value:	MEDIUM
Trust: 1.0
134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2014-0196
value:	MEDIUM
Trust: 1.0
VULHUB:	VHN-67689
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2014-0196
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2014-0196
severity:	MEDIUM
baseScore:	6.9
vectorString:	AV:L/AC:M/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.4
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
VULHUB:	VHN-67689
severity:	MEDIUM
baseScore:	6.9
vectorString:	AV:L/AC:M/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.4
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2014-0196
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0

sources: VULHUB: VHN-67689 // VULMON: CVE-2014-0196 // NVD: CVE-2014-0196 // NVD: CVE-2014-0196

PROBLEMTYPE DATA

problemtype:

CWE-362

Trust: 1.1

sources: VULHUB: VHN-67689 // NVD: CVE-2014-0196

THREAT TYPE

local

Trust: 0.4

sources: PACKETSTORM: 126712 // PACKETSTORM: 126800 // PACKETSTORM: 127035 // PACKETSTORM: 127253

TYPE

overflow

Trust: 0.2

sources: PACKETSTORM: 126712 // PACKETSTORM: 127035

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-67689 // VULMON: CVE-2014-0196

PATCH

title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2204-1	Trust: 0.1
title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2203-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-lts-quantal vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2199-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-ec2 vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2197-1	Trust: 0.1
title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2196-1	Trust: 0.1
title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2198-1	Trust: 0.1
title:	Ubuntu Security Notice: linux vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2202-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-lts-saucy vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2201-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-lts-raring vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2200-1	Trust: 0.1
title:	Red Hat: CVE-2014-0196	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2014-0196	Trust: 0.1
title:	Amazon Linux AMI: ALAS-2014-339	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2014-339	Trust: 0.1
title:	Amazon Linux AMI: ALAS-2014-392	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2014-392	Trust: 0.1
title:	Debian CVElist Bug Report Logs: CVE-2014-3122: try_to_unmap_cluster() should lock_page() before mlocking	url:	https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=e518c00ae2addd2c6e5ede8febf60365	Trust: 0.1
title:	Debian CVElist Bug Report Logs: CVE-2014-0196: pty layer race condition memory corruption	url:	https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=47961f3c5321e4c0c1841969631cdf51	Trust: 0.1
title:	Ubuntu Security Notice: linux-lts-trusty vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2260-1	Trust: 0.1
title:	Ubuntu Security Notice: linux-ti-omap4 vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2227-1	Trust: 0.1
title:	https://github.com/SunRain/CVE-2014-0196	url:	https://github.com/SunRain/CVE-2014-0196	Trust: 0.1
title:	kernel Exploitation	url:	https://github.com/ex4722/kernel_exploitation	Trust: 0.1
title:	CVE-2014-0196	url:	https://github.com/tempbottle/CVE-2014-0196	Trust: 0.1
title:	Exploits	url:	https://github.com/ycdxsb/Exploits	Trust: 0.1
title:	Exploits	url:	https://github.com/ycdxsb/CVEs	Trust: 0.1
title:	Exploit Development: Case Studies Windows Unix-like	url:	https://github.com/dyjakan/exploit-development-case-studies	Trust: 0.1
title:	kernelpop run modes	url:	https://github.com/ferovap/Tools	Trust: 0.1
title:	kernelpop usage	url:	https://github.com/spencerdodd/kernelpop	Trust: 0.1
title:	https://github.com/20142995/pocsuite	url:	https://github.com/20142995/pocsuite	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/p00h00/linux-exploits	Trust: 0.1
title:	Localroot Exploit	url:	https://github.com/anoaghost/Localroot_Compile	Trust: 0.1
title:	Android kernel exploit	url:	https://github.com/tangsilian/android-vuln	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/Shadowshusky/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/Feng4/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/coffee727/linux-exp	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/copperfieldd/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/m0mkris/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/C0dak/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/password520/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/xssfile/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/qiantu88/Linux--exp	Trust: 0.1
title:	Linux-Kernel-Exploit	url:	https://github.com/ozkanbilge/Linux-Kernel-Exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/s0wr0b1ndef/Linux-Kernal-Exploits-m-	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/zyjsuper/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/albinjoshy03/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/kumardineshwar/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/Straight-wood/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/SecWiki/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/yige666/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/QChiLan/linux-exp	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/xfinest/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/alian87/linux-kernel-exploits	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/Micr067/linux-kernel-exploits	Trust: 0.1
title:	https://github.com/fei9747/LinuxEelvation	url:	https://github.com/fei9747/LinuxEelvation	Trust: 0.1
title:	linux-kernel-exploits	url:	https://github.com/De4dCr0w/Linux-kernel-EoP-exp	Trust: 0.1
title:	Linux-Kernel-exploit	url:	https://github.com/skbasava/Linux-Kernel-exploit	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/Technoashofficial/kernel-exploitation-linux	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/s0wr0b1ndef/linux-kernel-exploitation	Trust: 0.1
title:	https://github.com/Al1ex/LinuxEelvation	url:	https://github.com/Al1ex/LinuxEelvation	Trust: 0.1
title:	Localroot Collection ✨	url:	https://github.com/Snoopy-Sec/Localroot-ALL-CVE	Trust: 0.1
title:	Linux Privilege Escalation Exploits	url:	https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits	Trust: 0.1
title:	所有收集类项目 Android 目录资源收集知名分析工具各类App Topic 其他工具文章贡献	url:	https://github.com/alphaSeclab/android-security	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/TamilHackz/linux-kernel-exploitation	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/khanhdz191/linux-kernel-exploitation	Trust: 0.1
title:	Contents	url:	https://github.com/hktalent/bug-bounty	Trust: 0.1
title:	Linux Kernel Exploitation	url:	https://github.com/xairy/linux-kernel-exploitation	Trust: 0.1
title:	Known Exploited Vulnerabilities Detector	url:	https://github.com/Ostorlab/KEV	Trust: 0.1
title:	Securelist	url:	https://securelist.com/elasticsearch-vuln-abuse-on-amazon-cloud-and-more-for-ddos-and-profit/65192/	Trust: 0.1
title:	The Register	url:	https://www.theregister.co.uk/2014/07/25/how_long_is_too_long_to_wait_for_a_security_update/	Trust: 0.1
title:	The Register	url:	https://www.theregister.co.uk/2014/05/14/linux_distos_get_patching_on_terminal_bug/	Trust: 0.1

sources: VULMON: CVE-2014-0196

EXTERNAL IDS

db:	NVD	id:	CVE-2014-0196	Trust: 1.9
db:	OSVDB	id:	106646	Trust: 1.2
db:	SECUNIA	id:	59218	Trust: 1.2
db:	SECUNIA	id:	59262	Trust: 1.2
db:	SECUNIA	id:	59599	Trust: 1.2
db:	EXPLOIT-DB	id:	33516	Trust: 1.2
db:	OPENWALL	id:	OSS-SECURITY/2014/05/05/6	Trust: 1.2
db:	PACKETSTORM	id:	126512	Trust: 0.2
db:	PACKETSTORM	id:	126712	Trust: 0.2
db:	PACKETSTORM	id:	126503	Trust: 0.2
db:	PACKETSTORM	id:	127035	Trust: 0.2
db:	PACKETSTORM	id:	126507	Trust: 0.2
db:	PACKETSTORM	id:	126508	Trust: 0.1
db:	PACKETSTORM	id:	126603	Trust: 0.1
db:	PACKETSTORM	id:	126511	Trust: 0.1
db:	PACKETSTORM	id:	126509	Trust: 0.1
db:	PACKETSTORM	id:	126510	Trust: 0.1
db:	PACKETSTORM	id:	126506	Trust: 0.1
db:	PACKETSTORM	id:	126624	Trust: 0.1
db:	PACKETSTORM	id:	126500	Trust: 0.1
db:	PACKETSTORM	id:	126578	Trust: 0.1
db:	CNNVD	id:	CNNVD-201405-092	Trust: 0.1
db:	SEEBUG	id:	SSVID-86729	Trust: 0.1
db:	VULHUB	id:	VHN-67689	Trust: 0.1
db:	VULMON	id:	CVE-2014-0196	Trust: 0.1
db:	PACKETSTORM	id:	126800	Trust: 0.1
db:	PACKETSTORM	id:	127253	Trust: 0.1

sources: VULHUB: VHN-67689 // VULMON: CVE-2014-0196 // PACKETSTORM: 126712 // PACKETSTORM: 126800 // PACKETSTORM: 126507 // PACKETSTORM: 126503 // PACKETSTORM: 126512 // PACKETSTORM: 127035 // PACKETSTORM: 127253 // NVD: CVE-2014-0196

REFERENCES

url:	http://rhn.redhat.com/errata/rhsa-2014-0512.html	Trust: 1.3
url:	http://www.ubuntu.com/usn/usn-2198-1	Trust: 1.3
url:	http://www.ubuntu.com/usn/usn-2199-1	Trust: 1.3
url:	http://www.ubuntu.com/usn/usn-2204-1	Trust: 1.3
url:	http://www.osvdb.org/106646	Trust: 1.2
url:	http://www.exploit-db.com/exploits/33516	Trust: 1.2
url:	http://secunia.com/advisories/59218	Trust: 1.2
url:	http://secunia.com/advisories/59262	Trust: 1.2
url:	http://secunia.com/advisories/59599	Trust: 1.2
url:	http://www.debian.org/security/2014/dsa-2926	Trust: 1.2
url:	http://www.debian.org/security/2014/dsa-2928	Trust: 1.2
url:	http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html	Trust: 1.2
url:	http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html	Trust: 1.2
url:	http://www.ubuntu.com/usn/usn-2196-1	Trust: 1.2
url:	http://www.ubuntu.com/usn/usn-2197-1	Trust: 1.2
url:	http://www.ubuntu.com/usn/usn-2200-1	Trust: 1.2
url:	http://www.ubuntu.com/usn/usn-2201-1	Trust: 1.2
url:	http://www.ubuntu.com/usn/usn-2202-1	Trust: 1.2
url:	http://www.ubuntu.com/usn/usn-2203-1	Trust: 1.2
url:	http://www.openwall.com/lists/oss-security/2014/05/05/6	Trust: 1.2
url:	http://bugzilla.novell.com/show_bug.cgi?id=875690	Trust: 1.2
url:	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3ba=commit%3bh=4291086b1f081b869c6d79e5b7441633dc3ace00	Trust: 1.2
url:	http://linux.oracle.com/errata/elsa-2014-0771.html	Trust: 1.2
url:	http://pastebin.com/raw.php?i=ytsfubgz	Trust: 1.2
url:	http://source.android.com/security/bulletin/2016-07-01.html	Trust: 1.2
url:	http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html	Trust: 1.2
url:	https://bugzilla.redhat.com/show_bug.cgi?id=1094232	Trust: 1.2
url:	https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00	Trust: 1.2
url:	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=cve-2014-0196	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2014-0196	Trust: 0.7
url:	https://www.redhat.com/security/data/cve/cve-2014-0196.html	Trust: 0.2
url:	https://www.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.2
url:	https://access.redhat.com/security/team/key/#package	Trust: 0.2
url:	https://access.redhat.com/site/articles/11258	Trust: 0.2
url:	https://bugzilla.redhat.com/):	Trust: 0.2
url:	https://access.redhat.com/security/team/contact/	Trust: 0.2
url:	https://access.redhat.com/security/updates/classification/#important	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2851	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2014-1738	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2014-1737	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2014-0077	Trust: 0.2
url:	https://cwe.mitre.org/data/definitions/362.html	Trust: 0.1
url:	https://www.exploit-db.com/exploits/33516/	Trust: 0.1
url:	https://github.com/sunrain/cve-2014-0196	Trust: 0.1
url:	https://github.com/tempbottle/cve-2014-0196	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2014-0196	Trust: 0.1
url:	https://usn.ubuntu.com/2204-1/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2706	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-0069	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0-1446.65	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-0101	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-4483	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2309	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2678	Trust: 0.1
url:	http://www.ubuntu.com/usn/usn-2227-1	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2672	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2523	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-lts-quantal/3.5.0-49.74~precise1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux/3.2.0-61.93	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux/3.13.0-24.47	Trust: 0.1
url:	https://rhn.redhat.com/errata/rhsa-2014-0678.html	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-30.54~precise2	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-3122	Trust: 0.1
url:	http://www.ubuntu.com/usn/usn-2260-1	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-3153	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2014-2568	Trust: 0.1

CREDITS

Ubuntu

Trust: 0.5

sources: PACKETSTORM: 126800 // PACKETSTORM: 126507 // PACKETSTORM: 126503 // PACKETSTORM: 126512 // PACKETSTORM: 127253

SOURCES

db:	VULHUB	id:	VHN-67689
db:	VULMON	id:	CVE-2014-0196
db:	PACKETSTORM	id:	126712
db:	PACKETSTORM	id:	126800
db:	PACKETSTORM	id:	126507
db:	PACKETSTORM	id:	126503
db:	PACKETSTORM	id:	126512
db:	PACKETSTORM	id:	127035
db:	PACKETSTORM	id:	127253
db:	NVD	id:	CVE-2014-0196

LAST UPDATE DATE

2026-01-16T21:29:37.585000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-67689	date:	2023-02-13T00:00:00
db:	VULMON	id:	CVE-2014-0196	date:	2024-02-09T00:00:00
db:	NVD	id:	CVE-2014-0196	date:	2025-10-22T01:15:53.760

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-67689	date:	2014-05-07T00:00:00
db:	VULMON	id:	CVE-2014-0196	date:	2014-05-07T00:00:00
db:	PACKETSTORM	id:	126712	date:	2014-05-19T17:02:25
db:	PACKETSTORM	id:	126800	date:	2014-05-27T16:02:18
db:	PACKETSTORM	id:	126507	date:	2014-05-06T20:24:17
db:	PACKETSTORM	id:	126503	date:	2014-05-06T20:23:49
db:	PACKETSTORM	id:	126512	date:	2014-05-06T20:24:48
db:	PACKETSTORM	id:	127035	date:	2014-06-11T00:09:36
db:	PACKETSTORM	id:	127253	date:	2014-06-27T16:48:32
db:	NVD	id:	CVE-2014-0196	date:	2014-05-07T10:55:04.337