CVE-2015-3310 Memory corruption in n/a

Medium 4.3 Published 24 Apr 2015 Updated 6 Aug 2024

Remote attackers can crash the PPP daemon via a crafted RADIUS accounting message due to a buffer overflow in the rc_mksid function.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2015-3310?

CVE-2015-3310 is a medium-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 24 Apr 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.

Weakness: CWE-119

Which versions are affected by CVE-2015-3310?

It affects 3 products.

Linux distribution packages (12)

`ppp` SUSE:Linux Enterprise Desktop 12 SP1	All versions	`2.4.7-3.4`
`ppp` SUSE:Linux Enterprise Desktop 12 SP2	All versions	`2.4.7-3.4`
`ppp` SUSE:Linux Enterprise Server 11 SP4	All versions	`2.4.5.git-2.31.7`
`ppp` SUSE:Linux Enterprise Server 12 SP1	All versions	`2.4.7-3.4`
`ppp` SUSE:Linux Enterprise Server 12 SP2	All versions	`2.4.7-3.4`
`ppp` SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2	All versions	`2.4.7-3.4`
`ppp` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	All versions	`2.4.5.git-2.31.7`
`ppp` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	All versions	`2.4.7-3.4`
`ppp` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	All versions	`2.4.7-3.4`
`ppp` SUSE:Linux Enterprise Software Development Kit 11 SP4	All versions	`2.4.5.git-2.31.7`
`ppp` SUSE:Linux Enterprise Software Development Kit 12 SP1	All versions	`2.4.7-3.4`
`ppp` SUSE:Linux Enterprise Software Development Kit 12 SP2	All versions	`2.4.7-3.4`

Products include Canonical Ubuntu Linux, Debian Debian Linux, Point-to-Point Protocol Project Point-to-Point Protocol.

How do I fix CVE-2015-3310?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2015-3310 being exploited?

There is no known exploitation of CVE-2015-3310 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as AZL-44211, DEBIAN-CVE-2015-3310, DLA-205-1, DSA-3228-1, GHSA-fm2f-v6g4-x3jw, MGASA-2015-0173 and 4 more.