CVE-2020-8597

CVE-2020-8597 同じコンピュータ上でテストするために2つの仮想マシンを使用しています。1つはサーバー、もう1つはクライアントで、どちらもNATを使用してネットワーク接続しています。そのため、両方ともens33ネットワークカードの下にあります。 pppoeサーバーのセットアップ 以下の記事に従ってサービスを設定できます。 https://askubuntu.com/questions/934685/pppoe-server-on-ubuntu-14-04-not-working-peer-xxx-failed-chap-session-verifica...

PPPwn

PPPwn - PlayStation 4 PPPoE RCE PPPwn は、FW 11.00 までの PlayStation 4 向けカーネルリモートコード実行エクスプロイトです。これは、PlayStation に責任を持って報告された CVE-2006-4304 の概念実証エクスプロイトです。 対応バージョンは次のとおりです: FW 7.00 / 7.01 / 7.02 FW 7.50 / 7.51 / 7.55 FW 8.00 / 8.01 / 8.03 FW 8.50 / 8.52 FW 9.00 FW 9.03 / 9.04 FW 9.50 / 9.51 / 9.60 FW...

CVE-2026-88273

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...

CVE-2026-88273

GeoVision GV-LPC2211 (version V1.13 ) is affected by a command injection vulnerability in its PPPoE username configuration. An administrator-controlled PPPoE username value can escape a sourced shell configuration assignment , allowing the execution of arbitrary commands as root . The attack requ...

CVE-2026-88273 GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...

EUVD-2026-75307

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...

kernel: flow_dissector: do not dissect PPPoE PFC frames

A flaw was found in the Linux kernel's flow dissector. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted Point-to-Point Protocol over Ethernet PPPoE Protocol Field Compression PFC frame to an affected system. The incorrect processing of...

kernel: flow_dissector: do not dissect PPPoE PFC frames

A flaw was found in the Linux kernel's flow dissector. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted Point-to-Point Protocol over Ethernet PPPoE Protocol Field Compression PFC frame to an affected system. The incorrect processing of...

CVE-2026-76590 TRENDnet TEW-755AP ssi wan.cgi stack-based overflow

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099987 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states that Protocol Field Compression PFC is NOT...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100719 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states that Protocol Field Compression PFC is NOT...

SUSE CVE-2026-68121

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This c...

CVE-2026-68121

A flaw was found in the Linux kernel's PPPoE Point-to-Point Protocol over Ethernet implementation. This vulnerability occurs because a pointer to network packet data is not updated after memory is reallocated, leading to the use of an outdated memory address. An attacker with local access could...

CVE-2026-68121

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This c...

UBUNTU-CVE-2026-68121

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This c...

CVE-2026-68121

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This c...

CVE-2026-68121 pppoe: reload header pointer after dev_hard_header()

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This c...

Linux Distros Unpatched Vulnerability : CVE-2026-68121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header before calling devhardheader. Device header callbacks are...

CVE-2026-67596

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...

EUVD-2026-51157

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher with a static key applied to the configuration backup file. Attackers can trivially...