CVE-2006-4304
published 2006-08-24CVE-2006-4304: Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows…
PriorityP343critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
11.32%
95.4th percentile
Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol (LCP) packets with an option length that exceeds the overall length, which triggers the overflow in (1) pppoe and (2) ippp. NOTE: this issue was originally incorrectly reported for the ppp driver.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| netbsd | netbsd | — | — |
| netbsd | netbsd | — | — |
| netbsd | netbsd | — | — |
| openbsd | openbsd | — | — |
| openbsd | openbsd | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
BSD
FreeBSD-SA-06:18.ppp: Buffer overflow in sppp(4)
bsd_advisories·2006-08-23·CVSS 10.0
CVE-2006-4304 [CRITICAL] FreeBSD-SA-06:18.ppp: Buffer overflow in sppp(4)
FreeBSD-SA-06:08.ppp Security Advisory
The FreeBSD Project
Topic: Buffer overflow in sppp(4)
Category: core
Module: sys_net
Announced: 2006-08-23
Credits: Martin Husemann, Pavel Cahyna
Affects: All FreeBSD releases.
Corrected: 2006-08-23 22:01:44 UTC (RELENG_6, 6.1-STABLE)
2006-08-23 22:02:25 UTC (RELENG_6_1, 6.1-RELEASE-p4)
2006-08-23 22:02:52 UTC (RELENG_6_0, 6.0-RELEASE-p10)
2006-08-23 22:03:55 UTC (RELENG_5, 5.5-STABLE)
2006-08-23 22:04:28 UTC (RELENG_5_5, 5.5-RELEASE-p3)
2006-08-23 22:04:58 UTC (RELENG_5_4, 5.4-RELEASE-p17)
2006-08-23 22:05:49 UTC (RELENG_5_3, 5.3-RELEASE-p32)
2006-08-23 22:06:08 UTC (RELENG_4, 4.11-STABLE)
2006-08-23 22:06:40 UTC (RELENG_4_11, 4.11-RELEASE-p20)
CVE Name: CVE-2006-4304
For general information regarding FreeBSD Security Advisories,
including descrip
GHSA
GHSA-2p53-823g-x3xx: Buffer overflow in the sppp driver in FreeBSD 4
ghsa_unreviewed·2022-05-03
CVE-2006-4304 [HIGH] GHSA-2p53-823g-x3xx: Buffer overflow in the sppp driver in FreeBSD 4
Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol (LCP) packets with an option length that exceeds the overall length, which triggers the overflow in (1) pppoe and (2) ippp. NOTE: this issue was originally incorrectly reported for the ppp driver.
No detection rules found.
No public exploits indexed.
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-019.txt.aschttp://secunia.com/advisories/21587http://secunia.com/advisories/21731http://security.FreeBSD.org/advisories/FreeBSD-SA-06:18.ppp.aschttp://security.FreeBSD.org/patches/SA-06:18/ppp4x.patchhttp://securitytracker.com/id?1016745http://www.openbsd.org/errata.html#sppphttp://www.openbsd.org/errata38.html#sppphttp://www.securityfocus.com/bid/19684https://exchange.xforce.ibmcloud.com/vulnerabilities/28562ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-019.txt.aschttp://secunia.com/advisories/21587http://secunia.com/advisories/21731http://security.FreeBSD.org/advisories/FreeBSD-SA-06:18.ppp.aschttp://security.FreeBSD.org/patches/SA-06:18/ppp4x.patchhttp://securitytracker.com/id?1016745http://www.openbsd.org/errata.html#sppphttp://www.openbsd.org/errata38.html#sppphttp://www.securityfocus.com/bid/19684https://exchange.xforce.ibmcloud.com/vulnerabilities/28562
2006-08-24
Published