Linux · Kernel
CVE-2014-0196
Linux Kernel Race Condition Vulnerability
무엇인가
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
CISA: Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.
할 일
The impacted product is end-of-life and should be disconnected if still in use.
미국 연방 기관 조치 기한: 2023년 6월 2일
- CISA 목록에 추가됨
- 2023년 5월 12일
- 게시됨
- 2014년 5월 7일
- 심각도
- 보통 5.5 CVSS 3.1
- 향후 30일 내 공격 가능성(EPSS)
- 20% 알려진 모든 취약점 중 상위 2.5%
- 약점 유형
- CWE-362
- 자세히
- NVD · CVE.org · CISA
모든 참고 자료(20)
- http://www.ubuntu.com/usn/USN-2203-1
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
- http://www.ubuntu.com/usn/USN-2204-1
- http://www.ubuntu.com/usn/USN-2202-1
- http://www.debian.org/security/2014/dsa-2928
- http://www.ubuntu.com/usn/USN-2199-1
- http://www.ubuntu.com/usn/USN-2197-1
- http://rhn.redhat.com/errata/RHSA-2014-0512.html
- http://www.debian.org/security/2014/dsa-2926
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html
- http://www.osvdb.org/106646
- http://www.openwall.com/lists/oss-security/2014/05/05/6
- http://secunia.com/advisories/59262
- http://secunia.com/advisories/59218
- http://www.exploit-db.com/exploits/33516
- http://linux.oracle.com/errata/ELSA-2014-0771.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1094232
- http://source.android.com/security/bulletin/2016-07-01.html
- http://secunia.com/advisories/59599
- https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00
Linux의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 9. 18. | Improper Check for Unusual or Exceptional Conditions | Kernel | 치명적 9.8 | 3.3% |
| 2026. 9. 18. | Race Condition | Kernel | 높음 7.8 | 1.6% |
| 2026. 9. 18. | Out-of-Bounds Write | Kernel | 높음 8.8 | 0.9% |
| 2026. 8. 27. | Unspecified | Kernel | 높음 7.8 | 0.7% |
| 2026. 8. 26. | Out-of-Bounds Write | Kernel | 높음 7.8 | 8.9% |
| 2026. 6. 2. | Improper Authentication | Kernel | 높음 7.8 | 5.5% |
| 2026. 5. 1. | Incorrect Resource Transfer Between Spheres | Kernel | 높음 7.8 | 98% |
| 2026. 1. 26. | Integer Overflow | Kernel | 높음 7.8 | 15% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.