Skip to content
OpenAdvisories
Medium USN-4451-2 1 CVE

ppp vulnerability

Published Aug 6, 2020 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

USN-4451-1 fixed a vulnerability in ppp. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

Thomas Chauchefoin working with Trend Micro´s Zero Day Initiative,
discovered that ppp incorrectly handled module loading. A local attacker
could use this issue to load arbitrary kernel modules and possibly execute
arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS ppp 2.4.5-5.1ubuntu2.3+esm2

Vulnerabilities 1

  • Medium 5.5
    CVE-2020-15704

    pppd arbitrary file read information disclosure vulnerability

    The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu…

    Canonical ppp ppp Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-15704