==========================================================================
Ubuntu Security Notice USN-2595-1
May 05, 2015
ppp vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 14.10
– Ubuntu 14.04 LTS
– Ubuntu 12.04 LTS
Summary:
ppp could be made to crash if it received specially crafted network
traffic.
Software Description:
– ppp: Point-to-Point Protocol (PPP)
Details:
It was discovered that ppp incorrectly handled large PIDs. When pppd is
used with a RADIUS server, a remote attacker could use this issue to cause
it to crash, resulting in a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.10:
ppp 2.4.5-5.1ubuntu3.2
Ubuntu 14.04 LTS:
ppp 2.4.5-5.1ubuntu2.2
Ubuntu 12.04 LTS:
ppp 2.4.5-5ubuntu1.2
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-2595-1
CVE-2015-3310
Package Information:
https://launchpad.net/ubuntu/+source/ppp/2.4.5-5.1ubuntu3.2
https://launchpad.net/ubuntu/+source/ppp/2.4.5-5.1ubuntu2.2
https://launchpad.net/ubuntu/+source/ppp/2.4.5-5ubuntu1.2
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1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=Ms66
—–END PGP SIGNATURE—–
—
