ppp vulnerability

2015-05-0500:00:00

ubuntu.com

9.4 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.068 Low

EPSS

Percentile

93.8%

JSON

Releases

Ubuntu 14.10
Ubuntu 14.04 ESM
Ubuntu 12.04

Packages

ppp - Point-to-Point Protocol (PPP)

Details

It was discovered that ppp incorrectly handled large PIDs. When pppd is
used with a RADIUS server, a remote attacker could use this issue to cause
it to crash, resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchppp< 2.4.5-5.1ubuntu3.2UNKNOWN
Ubuntu14.10noarchppp-udeb< 2.4.5-5.1ubuntu3.2UNKNOWN
Ubuntu14.04noarchppp< 2.4.5-5.1ubuntu2.2UNKNOWN
Ubuntu14.04noarchppp-udeb< 2.4.5-5.1ubuntu2.2UNKNOWN
Ubuntu12.04noarchppp< 2.4.5-5ubuntu1.2UNKNOWN
Ubuntu12.04noarchppp-udeb< 2.4.5-5ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.10	noarch	ppp	< 2.4.5-5.1ubuntu3.2	UNKNOWN
Ubuntu	14.10	noarch	ppp-udeb	< 2.4.5-5.1ubuntu3.2	UNKNOWN
Ubuntu	14.04	noarch	ppp	< 2.4.5-5.1ubuntu2.2	UNKNOWN
Ubuntu	14.04	noarch	ppp-udeb	< 2.4.5-5.1ubuntu2.2	UNKNOWN
Ubuntu	12.04	noarch	ppp	< 2.4.5-5ubuntu1.2	UNKNOWN
Ubuntu	12.04	noarch	ppp-udeb	< 2.4.5-5ubuntu1.2	UNKNOWN