CVE-2015-3310

2015-04-1600:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.068 Low

EPSS

Percentile

93.8%

JSON

Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul’s
PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than
65535, allows remote attackers to cause a denial of service (crash) via a
start accounting message to the RADIUS server.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchppp< 2.4.5-5ubuntu1.2UNKNOWN
ubuntu14.04noarchppp< 2.4.5-5.1ubuntu2.2UNKNOWN
ubuntu14.10noarchppp< 2.4.5-5.1ubuntu3.2UNKNOWN