中危
Linux kernel n_tty_write函数竞争条件漏洞
2014-05-05 00:00:00 公开 ，2025-10-22 01:07:50 更新
- 关键漏洞
- CISA KEV
- 公开PoC
- 本地
- CWE Top 25 (2023)
- 开源组件漏洞
- CWEs：
- CWE-362 （Race Condition）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：部分 2025-02-07 21:36:55
风险信息
- CVSS v2 向量
- AV:L/AC:M/Au:N/C:C/I:C/A:C
- CVSS v2 风险值
- 6.9
- CVSS v3.1 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS v3.1 风险值
- 5.5
详细信息
- 漏洞类型
- 竞争条件问题
- 漏洞描述
- Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。Linux kernel 3.14.3及之前版本的drivers/tty/n_tty.c文件中的n_tty_write函数存在安全漏洞，该漏洞源于程序没有正确管理tty驱动程序的访问权限。本地攻击者可利用该漏洞造通过长字符串的读写操作造成拒绝服务（内存损坏和系统崩溃）或获取特权。
- 修复建议
- 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4291086b1f081b869c6d79e5b7441633dc3ace00
参考链接
- http://bugzilla.novell.com/show_bug.cgi?id=875690
CVE · x_refsource_CONFIRM
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4291086b1f081b869c6d79e5b7441633dc3ace00
NVD
- https://bugzilla.redhat.com/show_bug.cgi?id=1094232
CVE · x_refsource_CONFIRM
- https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00
CVE · x_refsource_CONFIRM
- http://www.openwall.com/lists/oss-security/2014/05/05/6
CVE · mailing-list · x_refsource_MLIST
- http://pastebin.com/raw.php?i=yTSFUBgZ
CVE · x_refsource_MISC
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4291086b1f081b869c6d79e5b7441633dc3ace00
CVE · x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-2199-1
CVE · vendor-advisory · x_refsource_UBUNTU
- http://www.ubuntu.com/usn/USN-2201-1
CVE · vendor-advisory · x_refsource_UBUNTU
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html
CVE · vendor-advisory · x_refsource_SUSE
- http://www.ubuntu.com/usn/USN-2198-1
CVE · vendor-advisory · x_refsource_UBUNTU
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.html
CVE · x_refsource_CONFIRM
- http://rhn.redhat.com/errata/RHSA-2014-0512.html
CVE · vendor-advisory · x_refsource_REDHAT
- http://www.ubuntu.com/usn/USN-2204-1
CVE · vendor-advisory · x_refsource_UBUNTU
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html
CVE · vendor-advisory · x_refsource_SUSE
- http://www.debian.org/security/2014/dsa-2926
CVE · vendor-advisory · x_refsource_DEBIAN
- http://www.ubuntu.com/usn/USN-2200-1
CVE · vendor-advisory · x_refsource_UBUNTU
- http://www.ubuntu.com/usn/USN-2196-1
CVE · vendor-advisory · x_refsource_UBUNTU
- http://www.exploit-db.com/exploits/33516
CVE · exploit · x_refsource_EXPLOIT-DB
- http://linux.oracle.com/errata/ELSA-2014-0771.html
CVE · x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-2202-1
CVE · vendor-advisory · x_refsource_UBUNTU
- http://source.android.com/security/bulletin/2016-07-01.html
CVE · x_refsource_CONFIRM
- http://www.ubuntu.com/usn/USN-2203-1
CVE · vendor-advisory · x_refsource_UBUNTU
- http://www.debian.org/security/2014/dsa-2928
CVE · vendor-advisory · x_refsource_DEBIAN
- http://www.ubuntu.com/usn/USN-2197-1
CVE · vendor-advisory · x_refsource_UBUNTU
- https://osv.dev/vulnerability/DSA-2926-1
OSV
- https://osv.dev/vulnerability/DSA-2928-1
OSV
- http://secunia.com/advisories/59218
OSV
- http://secunia.com/advisories/59262
OSV
- http://secunia.com/advisories/59599
OSV
- https://security-tracker.debian.org/tracker/CVE-2014-0196
OSV
- https://osv.dev/vulnerability/CVE-2014-0196
OSV
- https://ubuntu.com/security/CVE-2014-0196
OSV
- https://ubuntu.com/security/notices/USN-2196-1
OSV
- https://ubuntu.com/security/notices/USN-2197-1
OSV
- https://ubuntu.com/security/notices/USN-2198-1
OSV
- https://ubuntu.com/security/notices/USN-2199-1
OSV
- https://ubuntu.com/security/notices/USN-2200-1
OSV
- https://ubuntu.com/security/notices/USN-2201-1
OSV
- https://ubuntu.com/security/notices/USN-2202-1
OSV
- https://ubuntu.com/security/notices/USN-2203-1
OSV
- https://ubuntu.com/security/notices/USN-2204-1
OSV
- https://ubuntu.com/security/notices/USN-2227-1
OSV
- https://ubuntu.com/security/notices/USN-2260-1
OSV
- https://www.cve.org/CVERecord?id=CVE-2014-0196
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2014-0196
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2014-0196
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0196
NVD · US Government Resource