Canonical Ppp vulnerabilities

1 known vulnerability affecting canonical/ppp.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-15704MEDIUMCVSS 5.5fixed in 2.4.7-1\+ubuntu1.16.04.3fixed in 2.4.7-2\+2ubuntu1.3+5 more2020-09-01

CVE-2020-15704 [MEDIUM] CWE-200 CVE-2020-15704: The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu1.4, 2.4.5-5.1ubuntu2.3+esm2, 2.4.7-1+2ubuntu1.16.04.3, 2.4.7-2+2ubuntu1.3, 2.4.7-2+4.1ubunt