Search/CVE-2022-4603
● CVE — Medium

CVE-2022-4603

VendorsambaProductpppDiscoveredDec 18, 2022UpdatedNov 21, 2024

A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is still doubted at the moment. The name of the patch is a75fb7b198eed50d769c80c36629f38346882cbf. It is recommended to apply a patch to fix this issue. VDB-216198 is the identifier assigned to this vulnerability. NOTE: pppdump is not used in normal process of setting up a PPP connection, is not installed setuid-root, and is not invoked automatically in any scenario.

CVSS v3.1
4.3 MEDIUM
EPSS
0.89%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.07pp
0.82% → 0.89% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityLOW
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Connections
2 relationships
Timeline
disclosure → media coverage
Dec 18, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024