blob: 96d238ea1f0a29f504f67f9c60ce0fdbd006091a (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
Description: information leak from pptp get{sock,peer}name
References:
- http://twitter.com/grsecurity/statuses/676744240802750464
- https://lkml.org/lkml/2015/12/14/252
Notes:
Bugs:
upstream: released (4.4-rc6) [09ccfd238e5a0e670d8178cf50180ea81ae09ae1]
3.16-upstream-stable: released (3.16.7-ckt22)
3.2-upstream-stable: released (3.2.75) [pptp-verify-sockaddr_len-in-pptp_bind-and-pptp_connect.patch]
2.6.32-upstream-stable: N/A "Vulnerable code not present"
sid: released (4.3.3-3) [bugfix/all/pptp-verify-sockaddr_len-in-pptp_bind-and-pptp_conne.patch]
3.16-jessie-security: released (3.16.7-ckt20-1+deb8u2) [bugfix/all/pptp-verify-sockaddr_len-in-pptp_bind-and-pptp_conne.patch]
3.2-wheezy-security: released (3.2.73-2+deb7u2) [bugfix/all/pptp-verify-sockaddr_len-in-pptp_bind-and-pptp_conne.patch]
2.6.32-squeeze-security: N/A "Vulnerable code not present"
|
