<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: pptp server</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-0244: pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a de</title><link>https://patchthecve.com/cve/CVE-2007-0244.html</link><guid>https://patchthecve.com/cve/CVE-2007-0244.html</guid><pubDate>Tue, 16 Jun 2026 22:35:11 +0000</pubDate><description>MEDIUM 5.0: pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connection tear-down) via (1) GRE packets with out-of-order sequence numbers or (2) certain GRE packets that are processed using a wrong pointer and improperly dequeued</description></item><item><title>CVE-2003-1455: Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4</title><link>https://patchthecve.com/cve/CVE-2003-1455.html</link><guid>https://patchthecve.com/cve/CVE-2003-1455.html</guid><pubDate>Tue, 16 Jun 2026 22:04:28 +0000</pubDate><description>HIGH 7.2: Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow local users to execute arbitrary code.</description></item><item><title>CVE-2003-0213: ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a </title><link>https://patchthecve.com/cve/CVE-2003-0213.html</link><guid>https://patchthecve.com/cve/CVE-2003-0213.html</guid><pubDate>Tue, 16 Jun 2026 22:01:45 +0000</pubDate><description>HIGH 7.5: ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.</description></item></channel></rss>