Lucene search
Gentoo FoundationGLSA-201412-19HistoryDec 13, 2014 - 12:00 a.m.
PPP: Information disclosure
2014-12-1300:00:00
Gentoo Foundation
security.gentoo.org
8
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.1%
Background
PPP is a Unix implementation of the Point-to-Point Protocol
Description
Integer overflow is discovered in the getword function in options.c in PPP
Impact
A local attacker could execute process with extremely long options list, possibly obtaining sensitive information.
Workaround
There is no known workaround at this time.
Resolution
All PPP users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-dialup/ppp-2.4.7"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-dialup/ppp | < 2.4.7 | UNKNOWN |
Related
securityvulns
securityvulns
ppp privilege escalation
2014-09-10 00:00:00
[ MDVSA-2014:178 ] ppp
2014-09-10 00:00:00
nessus
nessus
GLSA-201412-19 : PPP: Information disclosure
2014-12-15 00:00:00
Fedora 20 : ppp-2.4.5-34.fc20 (2014-9412)
2014-08-23 00:00:00
Mandriva Linux Security Advisory : ppp (MDVSA-2014:178)
2014-09-12 00:00:00
openvas
openvas
Debian Security Advisory DSA 3079-1 (ppp - security update)
2014-11-28 00:00:00
Fedora Update for ppp FEDORA-2014-9412
2014-08-23 00:00:00
Debian: Security Advisory (DSA-3079-1)
2014-11-27 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: ppp-2.4.5-34.fc20
2014-08-23 01:57:49
[SECURITY] Fedora 19 Update: ppp-2.4.5-33.fc19
2014-08-30 03:52:51
ubuntu
ubuntu
ppp vulnerability
2014-12-01 00:00:00
debian
debian
[SECURITY] [DSA 3079-1] ppp security update
2014-11-29 11:42:47
[SECURITY] [DSA 3079-1] ppp security update
2014-11-29 11:42:47
[SECURITY] [DLA 74-1] ppp security update
2014-10-21 08:01:08
prion
prion
Integer overflow
2014-11-15 21:59:00
cve
cve
CVE-2014-3158
2014-11-15 21:59:00
ubuntucve
ubuntucve
CVE-2014-3158
2014-11-15 00:00:00
osv
osv
ppp - security update
2014-11-28 00:00:00
debiancve
debiancve
CVE-2014-3158
2014-11-15 21:59:00
mageia
mageia
Updated ppp packages fix a security vulnerability
2014-09-05 13:07:37
slackware
slackware
[slackware-security] ppp
2015-04-22 01:23:52
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.1%
Related for GLSA-201412-19