Integer Overflow Vulnerability in Paul's PPP Package by Linux Vendors
CVE-2014-3158

Currently unrated

Key Information:

Vendor: Point-to-point Protocol Project
Status: Point-to-point Protocol
Vendor: CVE Published:; 15 November 2014

🔔 Create Point-to-point Protocol Project Vulnerability Alert

What is CVE-2014-3158?

An integer overflow in the getword function in options.c of the Paul's PPP Package (ppp) before version 2.4.7 can allow attackers to exploit privileged options. By injecting a long word into an options file, a heap-based buffer overflow occurs, leading to corruption of security-relevant variables. This vulnerability can potentially give attackers unauthorized access or control over the affected system, posing significant security risks.

References

http://www.ubuntu.com/usn/USN-2429-1

vendor-advisoryx_refsource_UBUNTU

http://marc.info/?l=linux-ppp&m=140764978420764

mailing-listx_refsource_MLIST

http://www.mandriva.com/security/advisories?name=MDVSA-20...

vendor-advisoryx_refsource_MANDRIVA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 15, 2014
Vulnerability Reserved
May 3, 2014

CVE-2014-3158 Data

JSON