- Vulnerability/
- USN-4288-1
USN-4288-1: ppp vulnerability
First published: Thu Feb 20 2020(Updated: )
It was discovered that ppp incorrectly handled certain rhostname values. A remote attacker could use this issue to cause ppp to crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/ppp | <2.4.7-2+4.1ubuntu4.1 | 2.4.7-2+4.1ubuntu4.1 |
| Ubuntu Ubuntu | =19.10 | |
| All of | ||
| ubuntu/ppp | <2.4.7-2+2ubuntu1.2 | 2.4.7-2+2ubuntu1.2 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/ppp | <2.4.7-1+2ubuntu1.16.04.2 | 2.4.7-1+2ubuntu1.16.04.2 |
| Ubuntu Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2020-8597
- https://ubuntu.com/security/notices/USN-4288-2
- https://launchpad.net/ubuntu/+source/ppp/2.4.7-2+4.1ubuntu4.1
- https://launchpad.net/ubuntu/+source/ppp/2.4.7-2+2ubuntu1.2
- https://launchpad.net/ubuntu/+source/ppp/2.4.7-1+2ubuntu1.16.04.2
- https://ubuntu.com/security/notices/USN-4288-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this ppp vulnerability?
The vulnerability ID for this ppp vulnerability is USN-4288-1.
What is the impact of the ppp vulnerability?
The ppp vulnerability could allow a remote attacker to cause ppp to crash, resulting in a denial of service, or possibly execute arbitrary code.
How can an attacker exploit the ppp vulnerability?
An attacker can exploit the ppp vulnerability by sending specially crafted rhostname values.
Which versions of Ubuntu are affected by the ppp vulnerability?
The versions of Ubuntu affected by the ppp vulnerability are 19.10, 18.04, and 16.04.
How can I fix the ppp vulnerability?
To fix the ppp vulnerability, apply the appropriate security update for your Ubuntu version.
- agent/severity
- agent/references
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/tags
- agent/title
- agent/description
- collector/usn
- source/Ubuntu
- anchor-related/USN-4288-2
- agent/software-canonical-lookup
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.10
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04