K16686 : Point-to-Point Protocol (PPP) vulnerability CVE-2015-3310

Security Advisory Description

Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul’s PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server. (CVE-2015-3310)
Impact
An authenticated remote attacker may be able to cause a denial-of-service (DoS) attack for an ARX system that is configured to perform Radius authentication.