The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-pppamazon-linux-ami-2-upgrade-ppp-debuginfoamazon-linux-ami-2-upgrade-ppp-devel | May 30, 2025 | Apr 22, 2025 | |
| Amazon_linux | — | amazon-linux-upgrade-ppp | May 28, 2025 | Apr 22, 2025 |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Apr 22, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-ppp | Jul 11, 2025 | Apr 22, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-ppp | Aug 13, 2025 | Jul 10, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-ppp | Jul 21, 2025 | Apr 22, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-ppp | Aug 13, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub