CVEvulnerability

CVE-2014-3158

7.5 HIGH Published 2014-11-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-11-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."

Affected configurations

• point-to-point protocol project point-to-point protocol (<= 2.4.6)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References