Main
Vulnerability Database
Exploits
ID:4062 - Exploit for Race condition in Linux kernel - CVE-2014-0196
ID:4062 - Exploit for Race condition in Linux kernel - CVE-2014-0196
Published: August 11, 2020
Vulnerability identifier: #VU41718
Vulnerability risk: High
CVE-ID: CVE-2014-0196
CWE-ID: CWE-362
Exploitation vector: Remote access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
Remediation
Install update from vendor's website.