CVE-2020-8037

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...

CVE-2020-8037

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2020-2387)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2020-19934 · Tcpdump +9 · Tcpdump +9

Name of the Vulnerable Software and Affected Versions: tcpdump version 4.9.3 Description: The issue concerns the ppp decapsulator in tcpdump, which can be tricked into allocating a large amount of memory. There is no information provided about the estimated number of potentially affected devices...

EulerOS 2.0 SP2 : ppp (EulerOS-SA-2020-2387)

According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, o...

management.furusato-ppp.jp Cross Site Scripting vulnerability OBB-1460832

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Debian DSA-4774-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service or information leaks. - CVE-2020-12351 Andy Nguyen discovered a flaw in the Bluetooth implementation in the way L2CAP packets with A2MP CID ar...

CVE-2020-7466

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition...

DEBIAN-CVE-2020-25643

A flaw was found in the HDLCPPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the pppcpparsecr function which can cause the system to crash or cause a denial of service. The highest threat from this...

CVE-2020-25643

A flaw was found in the HDLCPPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the pppcpparsecr function which can cause the system to crash or cause a denial of service. The highest threat from this...

CVE-2020-7466

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition...

CVE-2020-7466

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition...

CVE-2020-7466

The issue is in the MPD PPP implementation prior to version 5.9. A remote attacker who can send specifically crafted PPP authentication messages can trigger a read beyond the allocated memory buffer, leading to a denial of service. Affected component: MPD (Music Player Daemon) PPP handling. Root ...

PT-2020-5328 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.9-rc7 Description: A flaw in the HDLC PPP module of the Linux kernel causes memory corruption and a read overflow due to improper input validation in the ppp cp parse cr function. This can lead to a system cra...

CVE-2020-15704

A flaw in the Linux ppp daemon functionality was found in the way possibility of unexpected loading pppgeneric module during ppp daemon startup...

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

Buffer overflow

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

CVE-2020-15173

CVE-2020-15173 affects ACCEL-PPP (an implementation of PPTP/PPPoE/L2TP/SSTP). The issue is a buffer overflow that occurs when receiving an L2TP control packet containing an AVP of type string with no hidden flags and length set to less than 6. Documents indicate the problem was fixed by commit 23...