NVD

Id
31403  
Name
CVE-2014-3158  
Description
Integer overflow in the getword function in options.c in pppd in Paul"s PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-15  
Modified Date
2016-10-24  
Seq
2014-3158  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164430 31403 CVE-2014-3158 http://advisories.mageia.org/MGASA-2014-0368.html  View
164431 31403 CVE-2014-3158 FEDORA-2014-9412  View
164432 31403 CVE-2014-3158 [linux-ppp] 20140810 ppp-2.4.7 released  View
164433 31403 CVE-2014-3158 DSA-3079  View
164434 31403 CVE-2014-3158 MDVSA-2015:135  View
164435 31403 CVE-2014-3158 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
164436 31403 CVE-2014-3158 USN-2429-1  View
164437 31403 CVE-2014-3158 https://bugzilla.redhat.com/show_bug.cgi?id=1128748  View
164438 31403 CVE-2014-3158 https://github.com/paulusmack/ppp/commit/7658e8257183f062dc01f87969c140707c7e52cb  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16584 JVNDB-2014-005459 Paul の PPP パッケージの pppd の options.c 内の getword 関数における整数オーバーフローの脆弱性 Paul の PPP パッケージ (ppp) の pppd の options.c 内の getword 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2014-3158 70445 CVE-2014-3158 31403 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005459.html 2014-08-09 2015-06-09 View