CVE-2022-4603 ppp pppdump pppdump.c dumpppp array index
Improper array index validation in pppdump may cause memory corruption, though exploitation is unlikely as the tool is not used in standard PPP connections.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-4603?
CVE-2022-4603 is a medium-severity memory corruption vulnerability in unspecified ppp, published on 18 Dec 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is still doubted at the moment. The name of the patch is a75fb7b198eed50d769c80c36629f38346882cbf. It is recommended to apply a patch to fix this issue. VDB-216198 is the identifier assigned to this vulnerability. NOTE: pppdump is not used in normal process of setting up a PPP connection, is not installed setuid-root, and is not invoked automatically in any scenario.
Weakness: CWE-119
Which versions are affected by CVE-2022-4603?
It affects 1 product.
Linux distribution packages (14)
ppp SUSE:Linux Enterprise Micro 5.3 | All versions | 2.4.7-150000.5.13.1 |
ppp SUSE:Linux Enterprise Micro 5.4 | All versions | 2.4.7-150000.5.13.1 |
ppp SUSE:Linux Enterprise Micro 5.5 | All versions | 2.4.7-150000.5.13.1 |
ppp SUSE:Linux Enterprise Micro 5.5 | All versions | 2.4.7-150000.5.13.1 |
ppp SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 | All versions | 2.4.7-150000.5.13.1 |
ppp SUSE:Linux Enterprise Real Time 15 SP4 | All versions | 2.4.7-150000.5.13.1 |
ppp SUSE:Linux Enterprise Server 12 SP5 | All versions | 2.4.7-4.6.1 |
ppp SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 2.4.7-4.6.1 |
ppp SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 2.4.7-4.6.1 |
ppp openSUSE:Leap 15.4 | All versions | 2.4.7-150000.5.13.1 |
ppp openSUSE:Leap 15.5 | All versions | 2.4.7-150000.5.13.1 |
ppp openSUSE:Leap Micro 5.3 | All versions | 2.4.7-150000.5.13.1 |
ppp openSUSE:Leap Micro 5.4 | All versions | 2.4.7-150000.5.13.1 |
ppp openSUSE:Tumbleweed | All versions | 2.5.0-1.1 |
Products include Samba Ppp.
How do I fix CVE-2022-4603?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-4603 being exploited?
There is no known exploitation of CVE-2022-4603 in the wild and no public exploit code.
Sources
Also known as ALPINE-CVE-2022-4603, AZL-11860, AZL-36979, CLSA-2026-1785768873, CLSA-2026-1786622639, DEBIAN-CVE-2022-4603 and 6 more.