CVE-2015-3310

MEDIUM 4.3CVE-2015-3310 · Published 24/04/2015 · updated 17/06/2026

In short

CVE-2015-3310 is a MEDIUM (CVSS 4.3) vulnerability affecting point-to-point protocol (point-to-point protocol project).
Chance of exploitation in the next 30 days (EPSS): 5.4%, higher than 92.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
point-to-point protocol point-to-point_protocol_project	`≤ 2.4.6`	No fix yet

Description

Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.

References

More vulnerabilities in point-to-point protocol

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

point-to-point protocol

point-to-point_protocol_project

≤ 2.4.6

No fix yet

More vulnerabilities in point-to-point protocol

See all →