CVE-2014-3158

Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "corrupts security-relevant variables."...

CVE-2014-3158

An entry for CVE-2014-3158 concerns pppd (Paul's PPP Package, ppp) before 2.4.7. The root cause is an integer overflow in getword (options.c) that triggers a heap-based buffer overflow, potentially corrupting security-relevant variables. This allows attackers to access privileged options via a lo...

UBUNTU-CVE-2014-3158

Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "corrupts security-relevant variables."...

CVE-2014-3158: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "corrupts security-relevant variables."...

[SECURITY] [DLA 74-1] ppp security update

Package : ppp Version : 2.4.5-4+deb6u1 CVE ID : CVE-2014-3158 Debian Bug : http://bugs.debian.org/762789 This updates fixes a potential integer overflow in option parsing. A user in the group "dip" could provide a specially crafted configuration file of more than 2G and generate an integer...

DLA-74-1 ppp - security update

Bulletin has no description...

NetHogs - Small 'net top' tool

NetHogs is a small 'net top' tool. Instead of breaking the traffic down per protocol or per subnet, like most tools do, it groups bandwidth by process. NetHogs does not rely on a special kernel module to be loaded. If there's suddenly a lot of network traffic, you can fire up NetHogs and...

openSUSE Security Update : ppp (openSUSE-SU-2014:1135-1)

ppp was updated to fix an integer overflow in option parsing. CVE-2014-3158, bnc891489. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-545. The text description of this plugin i...

Mandriva Linux Security Advisory : ppp (MDVSA-2014:178)

Updated ppp packages fix security vulnerability : A vulnerability in ppp before 2.4.7 may enable an unprivileged attacker to access privileged options CVE-2014-3158. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[ MDVSA-2014:178 ] ppp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:178 http://www.mandriva.com/en/support/security/ Package : ppp Date : September 5, 2014 Affected: Business Server 1.0 Problem Description: Updated ppp packages fix security vulnerability: A vulnerability in...

MGASA-2014-0368 Updated ppp packages fix a security vulnerability

Updated ppp packages fix security vulnerability: A vulnerability in ppp before 2.4.7 may enable an unprivileged attacker to access privileged options CVE-2014-3158...

Updated ppp packages fix a security vulnerability

Updated ppp packages fix security vulnerability: A vulnerability in ppp before 2.4.7 may enable an unprivileged attacker to access privileged options CVE-2014-3158...

SuSE 11.3 Security Update : ppp (SAT Patch Number 9648)

This ppp update fixes a potential security issue that an unprivileged attacker could access privileged options : - integer overflow in option parsing CVE-2014-3158, bnc891489 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Fedora Update for ppp FEDORA-2014-9401

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: ppp-2.4.5-33.fc19

The ppp package contains the PPP Point-to-Point Protocol daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an ISP Internet Service Provider or other organization over a modem...

Fedora 19 : ppp-2.4.5-33.fc19 (2014-9401)

Security fix for CVE-2014-3158 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[SECURITY] Fedora 20 Update: ppp-2.4.5-34.fc20

The ppp package contains the PPP Point-to-Point Protocol daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an ISP Internet Service Provider or other organization over a modem...

Fedora 20 : ppp-2.4.5-34.fc20 (2014-9412)

Security fix for CVE-2014-3158 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for ppp FEDORA-2014-9412

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for kernel RHSA-2014:0923-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...