553 matches found
Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-
Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597- Sri Lanka Institute of Information Technology Assignment 1 M. P. D. M. Dias IT19165530 MLBWDY2S113.1 Point to Point Protocol Daemon RCE Vulnerability CVE-2020-8597 Systems and Network Programming– IE2012 Content 1. Introduction 2...
CVE-2026-84015
Heap-based buffer overflow in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an unauthorized attacker to execute code over a network...
CVE-2026-84015
A heap-based buffer overflow exists in the Remote Access Point-to-Point Protocol (PPP) EAP-TLS component within Microsoft Windows . This vulnerability allows an unauthorized attacker to execute arbitrary code over a network. The impact is rated as CRITICAL with a CVSS score of 9.80 . No specific ...
Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an unauthorized attacker to execute code over a network...
CVE-2026-84015: Heap-based Buffer Overflow
Heap-based buffer overflow in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-84015: Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an unauthorized attacker to execute code over a network...
PT-2026-112704
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Remote Access Point-to-Point Protocol PPP EAP-TLS. This flaw allows an unauthorized attacker to execute arbitrary code over a network. A...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: pppasync: Limited MRU to 64K. The syzbot triggered a warning 1 in allocpages: WARNONONCEGFP order MAXPAGEORDER, gfp. Willem fixed a similar issue in the commit c0a2a1b0d631 “ppp: limited MRU to 64K”. Apply the same sanity chec...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: ppp: Associating skb with a device at tx. Syzkaller triggered a flow dissector warning with the following code: c r0 = openat$ppp0xffffffffffffff9c, &0x7f0000000000, 0xc0802, 0x0 ioctl$PPPIOCNEWUNITr0, 0xc004743e,...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable – incorrect pppoe tuple PPPoE traffic that reaches the ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mismatch in th...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: - In pptp: ensure that the minimum skb length is properly set in pptpxmit. - Commit aabc6596ffb3 “net: ppp: Add bound checking for skb data in pppsynctxmung” fixed pppsynctxmunge. We need a similar fix in pptpxmit; otherwise, ...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: ppp: Added bound checking for skb data in pppsynctxmung. We ensure that we have enough data in the linear buffer from the skb before accessing the initial bytes. This prevents potential out-of-bounds accesses when processing...
CVE-2026-68398
CVE-2026-68398 is a Linux kernel UAF in PPPoL2TP: pppol2tp_recv() can dereference a freed internal PPP channel when a bound-but-unattached channel is closed, leading to potential local escalation. The fix defers freeing the channel to an RCU callback (call_rcu) to ensure a grace period for in-fli...
CVE-2026-68121
Summary of CVE-2026-68121 (Linux kernel, PPPoE): A vulnerability arises when device header callbacks reallocate the skb head after PPPoE header is referenced, causing a stale pointer to the PPPoE header used by pppoe_sendmsg(). This can occur if a send is blocked in copy_from_user() while a non-E...
CVE-2026-68121 pppoe: reload header pointer after dev_hard_header()
In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This c...
SUSE CVE-2026-63803
In the Linux kernel, the following vulnerability has been resolved: hdlcppp: sync per-proto timers before freeing hdlc state Each PPP control protocol LCP/IPCP/IPV6CP embedded in struct ppp registers a timer via timersetup. That struct ppp is the hdlc-state allocation, which detachhdlcprotocol...
CVE-2026-63803 hdlc_ppp: sync per-proto timers before freeing hdlc state
In the Linux kernel, the following vulnerability has been resolved: hdlcppp: sync per-proto timers before freeing hdlc state Each PPP control protocol LCP/IPCP/IPV6CP embedded in struct ppp registers a timer via timersetup. That struct ppp is the hdlc-state allocation, which detachhdlcprotocol...
OESA-2026-2992 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ppp: require CAPNETADMIN in target netns for unattached ioctls /dev/ppp open is currently authorized against file-fcred-userns, while unattached administrative...
CVE-2026-13564 Edimax EW-7478APC POST Request formPPPoESetup stack-based overflow
A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. Performing a manipulation of the argument pppUserName results in stack-based buffer overflow. The attack can be initiated remotely...