Unscored severity · published Nov 15, 2014
CVE-2014-3158
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an…
–
CVSS
3.5%
EPSS
No
On KEV
Description
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Point-to-point Protocol · Point-to-point Protocol Project
through 2.4.6 · source: NVD
Affected product
PP
Point-to-point Protocol
Point-to-point Protocol Project
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3158
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3158
advisories.mageia.org
http://advisories.mageia.org/MGASA-2014-0368.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136932.html
marc.info
http://marc.info/?l=linux-ppp&m=140764978420764
www.debian.org
http://www.debian.org/security/2014/dsa-3079
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2015:135
www.oracle.com
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
More from Point-to-point Protocol
9.8
CVE-2020-8597
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions
9.8
CVE-2018-11574
Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass
–
CVE-2015-3310
Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote…
–
CVE-2006-2194
The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing…
–
CVE-2004-2695
SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary…