QwikSec

Security Database

CVE

CWE

Training

CVE-2014-3158

Published: Nov 15, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_UBUNTU

[linux-ppp] 20140810 ppp-2.4.7 released

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_MANDRIVA

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

x_refsource_CONFIRM

https://bugzilla.redhat.com/show_bug.cgi?id=1128748

x_refsource_CONFIRM

FEDORA-2014-9412

vendor-advisory

x_refsource_FEDORA

vendor-advisory

x_refsource_DEBIAN

http://advisories.mageia.org/MGASA-2014-0368.html

x_refsource_CONFIRM

https://github.com/paulusmack/ppp/commit/7658e8257183f062dc01f87969c140707c7e52cb

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.