Skip to content
OpenAdvisories
Critical USN-3810-1 1 CVE

ppp vulnerability

Published Nov 6, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Ivan Gotovchits discovered that ppp incorrectly handled the EAP-TLS
protocol. A remote attacker could use this issue to cause ppp to crash,
resulting in a denial of service, or possibly bypass authentication.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS ppp 2.4.5-5.1ubuntu2.3
Ubuntu · 16.04 LTS 16.04:LTS ppp 2.4.7-1+2ubuntu1.16.04.1
Ubuntu · 18.04 LTS 18.04:LTS ppp 2.4.7-2+2ubuntu1.1

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-11574

    Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a …

    ppp ppp Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-11574