Lucene search
+L

1365 matches found

osv-azl
osv-azl
•added 2022/12/18 11:15 a.m.•15 views

AZL-11860 CVE-2022-4603 affecting package ppp 2.4.7-36

A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is sti...

6.5CVSS5.3AI score0.00859EPSS
SaveExploits0References1
Prion
Prion
•added 2022/12/18 11:15 a.m.•25 views

Input validation

A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is sti...

4.3CVSS6.4AI score0.00859EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2022/12/18 11:15 a.m.•30 views

CVE-2022-4603

A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is sti...

6.5CVSS5.7AI score0.00859EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/18 12:00 a.m.•56 views

CVE-2022-4603 ppp pppdump pppdump.c dumpppp array index

A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is sti...

4.3CVSS6.7AI score0.00859EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/12/18 12:00 a.m.•16 views

ppp 缓冲区错误漏洞

ppp is an open source library from Paul PPP Package that implements the Point-to-Point Protocol ppp. A buffer error vulnerability exists in ppp, which stems from a problem with the dumpppp function in the pppdump/pppdump.c file in the pppdump component, where manipulation of the parameter...

6.5CVSS6.4AI score0.00859EPSS
SaveExploits0References2
CVE
CVE
•added 2022/12/18 12:00 a.m.•264 views

CVE-2022-4603

CVE-2022-4603 concerns pppdump dumpppp in pppdump/pppdump.c, where manipulation of spkt.buf/rpkt.buf leads to improper validation of an array index. The vulnerability’s real existence is repeatedly noted as doubtful in the initial description, though multiple connected sources still reference the...

6.5CVSS5.6AI score0.00859EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2022/12/18 12:00 a.m.•30 views

CVE-2022-4603

A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is sti...

6.5CVSS6.2AI score0.00859EPSS
SaveExploits0
osv-debian
osv-debian
•added 2022/12/16 4:15 p.m.•6 views

DEBIAN-CVE-2022-20567

In pppol2tpcreate of l2tpppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.4CVSS6.8AI score0.00136EPSS
SaveExploits0References1
Apple
Apple
•added 2022/12/13 12:00 a.m.•298 views

About the security content of macOS Monterey 12.6.2

About the security content of macOS Monterey 12.6.2 This document describes the security content of macOS Monterey 12.6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

9.8CVSS8.7AI score0.47933EPSS
SaveExploits13References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/18 12:00 a.m.•23 views

Cisco IOS XR PPPoE DoS

The vulnerability of the PPP over Ethernet PPPoE network gateway function in Cisco IOS XR operating systems is related to an unvalidated error state. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specific PPPoE packets...

6.1CVSS5.5AI score0.00277EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/14 12:00 a.m.•19 views

PT-2022-5097 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE...

6.1CVSS6.3AI score0.00277EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•9 views

Ubuntu: Security Advisory (USN-2429-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.5AI score0.03546EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•24 views

Ubuntu: Security Advisory (USN-4451-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.6AI score0.00364EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•10 views

Ubuntu: Security Advisory (USN-12-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•32 views

Ubuntu: Security Advisory (USN-4288-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.19925EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•16 views

Ubuntu: Security Advisory (USN-310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.7AI score0.00395EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•34 views

Ubuntu: Security Advisory (USN-2433-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS7.8AI score0.19807EPSS
SaveExploits10References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/08/19 3:55 a.m.•11 views

Malicious code in ppp-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3416ea10c8a458911e489f49d6d066428ac7b49b5cca1f8bd39f6b80e9986eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/08/10 8:15 p.m.•9 views

CVE-2022-35522

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: pppusername, ppppasswd, rwangateway, rwanmask and rwanip, which leads to command injection in page /wan.shtml...

9.8CVSS7.3AI score0.02278EPSS
SaveExploits1References2
NVD
NVD
•added 2022/08/09 8:15 p.m.•24 views

CVE-2022-35769

Windows Point-to-Point Protocol PPP Denial of Service Vulnerability...

7.5CVSS0.02424EPSS
SaveExploits0References1
Rows per page
Query Builder