CVE-2018-11574 - CVE House
Back to Database
Status published Unknown CVE-2018-11574

Improper input validation together with an integer overflow in the...

Vulnerability Description

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the `refuse-app` option are unaffected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-11574

Credits & Attribution

No credits recorded in the NVD database.

References

More from point-to-point protocol project

View All →
CVE-2020-8597
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an...
Unknown 0
CVE-2014-3158
Integer overflow in the getword function in options.c in pppd...
High 7.5
CVE-2006-2194
The winbind plugin in pppd for ppp 2.4.4 and earlier...
High 7.2

Affected Vendor

point-to-point protocol project

View all reports →

Affected Software

point-to-point protocol, ubuntu linux
Vulnerable Versions:
0, 14.04, 16.04, 18.04

Timeline

Official Publish: June 14th, 2018
Last Modified: December 3rd, 2025
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.