CVE-2022-41025: Buffer Copy without Checking Size of Input

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

PT-2023-13950

Name of the Vulnerable Software and Affected Versions Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description The issue concerns stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary command...

CVE-2022-41023: Buffer Copy without Checking Size of Input

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

Windows PPTP Protocol Use After Free (CVE-2022-21972)

A remote code execution vulnerability exists in Microsoft Windows VPN component. The vulnerability is due to improper handling of PPTP packets...

Point to Point Tunneling Protocol Code Execution

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted PPTP packe...

CVE-2022-41116

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability...

CVE-2022-41090

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability...

CVE-2022-41039

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

CVE-2022-41044

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

Remote code execution

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

Remote code execution

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

Denial of service

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability...

CVE-2022-41044 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-41044

CVE-2022-41044 is a Windows PPTP Remote Code Execution Vulnerability. The CVE entry describes it as affecting the Windows Point-to-Point Tunneling Protocol and documents a high-severity remote code execution risk with network attack vector. Connected sources reference Windows security updates (KB...

CVE-2022-41090

Technical details for CVE-2022-41090 (Windows PPTP DoS) are not provided in the connected documents. No affected products, versions, or fixes are listed here. Monitor official advisories for updates and remediation guidance.

CVE-2022-41088 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-41116

CVE-2022-41116 is a Windows PPTP Denial of Service vulnerability. The available sources describe a network-exposed issue affecting the Point-to-Point Tunneling Protocol, with a CVSSv3.1 base score of 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). The Connected documents do not specify the exact affec...

CVE-2022-41116 Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

...

CVE-2022-41090 Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

...

Microsoft Patch Tuesday for November 2022 — Snort rules and prominent vulnerabilities

Microsoft released its monthly security update on Tuesday, disclosing 62 vulnerabilities. Of these vulnerabilities, 8 are classified as "Critical" and the rest are classified as "Important." Three of the critical entries are remote code execution RCE vulnerabilities for Windows Point-to-Point...