154 matches found
UBUNTU-CVE-2025-21922
In the Linux kernel, the following vulnerability has been resolved: ppp: Fix KMSAN uninit-value warning with bpf Syzbot caught an "KMSAN: uninit-value" warning 1, which is caused by the ppp driver not initializing a 2-byte header when using socket filter. The following code can generate a PPP...
The vulnerability of the ppp_read() and ppp_write() functions (drivers/net/ppp/ppp_generic.c) in the Linux operating system’s PPP kernel driver allows a hacker to cause a service failure.
The vulnerability of the pppread and pppwrite functions drivers/net/ppp/pppgeneric.c in the Linux kernel-based PPP driver is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
ppp: do not assume bh is held in ppp_channel_bridge_input()
...
kernel: ppp_async: limit MRU to 64K
In the Linux kernel, the following vulnerability has been resolved: pppasync: limit MRU to 64K syzbot triggered a warning 1 in allocpages: WARNONONCEGFPorder MAXPAGEORDER, gfp Willem fixed a similar issue in commit c0a2a1b0d631 "ppp: limit MRU to 64K" Adopt the same sanity check for...
ppp: fix ppp_async_encode() illegal access
...
AZL-51111 CVE-2024-50035 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case, pppoesendmsg is called with a zero size. Then pppasyncencode is called with an empty skb. BUG: KMSAN: uninit-value in pppasyncencod...
DEBIAN-CVE-2024-49946
In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in pppchannelbridgeinput Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in the socket backlog is the...
kernel: ppp: reject claimed-as-LCP but actually malformed packets
The vulnerability was found in the Linux kernel's ppp pppgeneric.c driver, in the pppread and pppwrite functions where malformed packets were erroneously identified as LCP packets, leading to potential issues with packet handling. This flaw could potentially lead to system instability...
kernel: ppp: reject claimed-as-LCP but actually malformed packets
The vulnerability was found in the Linux kernel's ppp pppgeneric.c driver, in the pppread and pppwrite functions where malformed packets were erroneously identified as LCP packets, leading to potential issues with packet handling. This flaw could potentially lead to system instability...
UBUNTU-CVE-2024-26675
In the Linux kernel, the following vulnerability has been resolved: pppasync: limit MRU to 64K syzbot triggered a warning 1 in allocpages: WARNONONCEGFPorder MAXPAGEORDER, gfp Willem fixed a similar issue in commit c0a2a1b0d631 "ppp: limit MRU to 64K" Adopt the same sanity check for...
[SECURITY] Fedora 38 Update: ppp-2.4.9-10.fc38
The ppp package contains the PPP Point-to-Point Protocol daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an ISP Internet Service Provider or other organization over a modem...
The vulnerability of the dumpppp function in the pppdump/pppdump.c component of the Point-to-Point Ppp protocol allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability of the dumpppp function in the pppdump/pppdump.c component of the Point-to-Point Ppp protocol is related to the issue of the operation’s output going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential...
CVE-2022-35747 Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
...
CVE-2022-35744 Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
...
CVE-2022-35744: Undefined Security Weakness
Windows Point-to-Point Protocol PPP Remote Code Execution Vulnerability...
CVE-2022-35747: Undefined Security Weakness
Windows Point-to-Point Protocol PPP Denial of Service Vulnerability...
CVE-2023-28224: Sensitive Data Storage in Improperly Locked Memory
Windows Point-to-Point Protocol over Ethernet PPPoE Remote Code Execution Vulnerability...
The vulnerability of the implementation of the Point-to-Point Protocol (PPP) in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Point-to-Point Protocol PPP implementation in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...