CVE-2022-22035 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-24504

Technical details for CVE-2022-24504 are not publicly provided in the supplied documents. Monitor for updates in the connected sources for affected products, impact specifics, and remediation information.

CVE-2022-22035 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-38000

CVE-2022-38000 is a Windows Point-to-Point Tunneling Protocol (PPTP) remote code execution vulnerability. Connected MS updates document this CVE under the Windows PPTP entry and indicate it is addressed by October 2022 security updates (e.g., KB5018410/KB5018427). The vulnerability affects the PP...

CVE-2022-38047 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-41081 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-33634

CVE-2022-33634 is listed in the connected NCSc advisory as a Windows PPTP vulnerability with an impact described as “Execution of random code” and a CVSS-like score of 8.10. The available connected documents do not provide explicit exploitation details, affected product versions, root cause, or a...

CVE-2022-41081 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-24504 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-41081

CVE-2022-41081 is a Windows PPTP Remote Code Execution vulnerability in the Point-to-Point Tunneling Protocol. The root cause is the PPTP implementation failing to properly filter external input during code segment construction, enabling arbitrary code execution when exploited over a network. The...

ASB-A-201660636

In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for...

new packages: pptp

An update is available for pptp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

CVE-2022-23270 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-23270

Technical details about CVE-2022-23270 are not present in the provided connected documents. Public information on affected products, root cause, and remediation is not provided here. Monitor Microsoft Security Update Guide and MSRC advisories for official details and fixes.

CVE-2022-21972

CVE-2022-21972 is a Windows PPTP VPN component remote code execution vulnerability caused by use-after-free handling of PPTP packets. The connected advisory states a remote code execution vulnerability exists in Windows VPN due to improper PPTP packet handling, i.e., PPTP protocol use after free....

CVE-2022-21972 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-25461

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function...

CVE-2022-25461

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetPptpServerCfg function, which can be exploited by an attacker to cause arbitrary command execution...