Описание
mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface.
A local user with access to the ppp(8) command interface can crash ppp(8) or potentially execute arbitrary code as root.
EPSS
Процентиль: 12%
0.00218
Низкий
7.8 High
CVSS3
Дефекты
CWE-122
Связанные уязвимости
CVSS3: 7.8
github
10 дней назад
mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user with access to the ppp(8) command interface can crash ppp(8) or potentially execute arbitrary code as root.
EPSS
Процентиль: 12%
0.00218
Низкий
7.8 High
CVSS3
Дефекты
CWE-122