https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-8597.htmlhttps://patchthecve.com/cve/CVE-2020-8597.htmlWed, 17 Jun 2026 03:26:36 +0000CRITICAL 9.8: eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.https://patchthecve.com/cve/CVE-2018-11574.htmlhttps://patchthecve.com/cve/CVE-2018-11574.htmlWed, 17 Jun 2026 01:36:11 +0000CRITICAL 9.8: Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurathttps://patchthecve.com/cve/CVE-2015-3310.htmlhttps://patchthecve.com/cve/CVE-2015-3310.htmlWed, 17 Jun 2026 00:25:42 +0000MEDIUM 4.3: Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.https://patchthecve.com/cve/CVE-2014-3158.htmlhttps://patchthecve.com/cve/CVE-2014-3158.htmlWed, 17 Jun 2026 00:07:41 +0000HIGH 7.5: Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."