https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-4603.htmlhttps://patchthecve.com/cve/CVE-2022-4603.htmlWed, 17 Jun 2026 05:21:19 +0000MEDIUM 4.3: A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is still https://patchthecve.com/cve/CVE-2020-15704.htmlhttps://patchthecve.com/cve/CVE-2020-15704.htmlWed, 17 Jun 2026 02:57:05 +0000MEDIUM 5.5: The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu1.4, 2.4.5-5.1ubuntu2.3+esm2, 2.4.7-1+2ubhttps://patchthecve.com/cve/CVE-2008-5366.htmlhttps://patchthecve.com/cve/CVE-2008-5366.htmlTue, 16 Jun 2026 22:59:50 +0000MEDIUM 6.9: The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/probe-finished or (2) /tmp/ppp-errors temporary file.