Summary
It was discovered that ppp incorrectly handled certain options files. A
local attacker could possibly use this issue to escalate privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | ppp | 2.4.5-5.1ubuntu2.1 |
Vulnerabilities 1
-
Unscored —
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers…
References
-
report
https://ubuntu.com/security/CVE-2014-3158