Описание
security update for ppp
The ppp package was updated to fix one security issue.
- CVE-2015-3310: Fixed buffer overflow in radius plug-ins rc_mksid() (bnc#927841).
Список пакетов
openSUSE Leap 42.1
ppp-2.4.7-5.1
ppp-devel-2.4.7-5.1
Ссылки
- E-Mail link for openSUSE-SU-2015:2121-1
- SUSE Security Ratings
Описание
Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.
Затронутые продукты
openSUSE Leap 42.1:ppp-2.4.7-5.1
openSUSE Leap 42.1:ppp-devel-2.4.7-5.1
Ссылки
- CVE-2015-3310
- SUSE Bug 1149972
- SUSE Bug 927841