CVE-2007-0244 pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connection tear-down) via (1) GRE packets with out-of-order sequence...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connection tear-down) via (1) GRE packets with out-of-order sequence numbers or (2) certain GRE packets that are processed using a wrong pointer and improperly dequeued.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| poptop pptp server | <= 1.3.3 | No fix listed |
| debian/pptpd(Debian:12) | < 1.3.4-1 | 1.3.4-1 |
| debian/pptpd(Debian:13) | < 1.3.4-1 | 1.3.4-1 |
| debian/pptpd(Debian:14) | < 1.3.4-1 | 1.3.4-1 |
References
- 25220 third-party-advisory
- 25255 third-party-advisory
- 26987 third-party-advisory
- GLSA-200705-18 vendor-advisory
- sourceforge.net
- DSA-1288 patch vendor-advisory
- SUSE-SR:2007:010 vendor-advisory
- SUSE-SR:2007:019 vendor-advisory
- 23886 vdb-entry
- 1018064 vdb-entry
- 2007-0017 vendor-advisory
- USN-459-1 vendor-advisory
- USN-459-2 vendor-advisory
- ADV-2007-1743 vdb-entry
- Debian Security Tracker CVE-2007-0244 vendor-advisory