Debian/linux: low 2.3
The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not verify an address length, which allows local users to obtain sensitive information f
Action: Upgrade linux to 4.3.3-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.3-3 | - |
Fixed versions
| 4.3.3-3 |
Sources
published · modified · JSON