CVE-2008-2750 — kernel: l2tp: Fix potential memory corruption in pppol2tp-recvmsg() (Heap corruption DoS)

Back Back to CVE browser

HIGH

kernel: l2tp: Fix potential memory corruption in pppol2tp-recvmsg() (Heap corruption DoS)

Published Jun 18, 2008

7.8

HIGH

CVSS 2.0

EPSS 3.82%

Description

The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service (kernel heap memory corruption and system crash) and possibly have unspecified other impact via a crafted PPPOL2TP packet that results in a large value for a certain length variable.

Affected products

Remediation

Red Hat statement

Not vulnerable. This issue did not affect versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.

Metrics

3.82% 0.03822

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03822

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (14 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.82% (0.03822)	89.73th	v5 (v2026.06.15)
Jun 15, 2026	3.82% (0.03822)	88.67th	v5 (v2026.06.15)
Nov 25, 2025	9.72% (0.09719)	92.62th	v4 (v2025.03.14)
Mar 19, 2025	12.67% (0.12665)	93.12th	v4 (v2025.03.14)
Mar 17, 2025	8.09% (0.08085)	91.51th	v4 (v2025.03.14)
Dec 12, 2024	17.33% (0.17326)	96.29th	v3 (v2023.03.01)
Jun 24, 2024	16.38% (0.16375)	96.04th	v3 (v2023.03.01)
Nov 8, 2023	15.36% (0.15357)	95.31th	v3 (v2023.03.01)
Oct 16, 2023	13.36% (0.13356)	94.93th	v3 (v2023.03.01)
Mar 9, 2023	12.51% (0.12512)	94.51th	v3 (v2023.03.01)
Mar 7, 2023	16.69% (0.16689)	95.14th	v3 (v2023.03.01)
Mar 6, 2023	3.78% (0.03779)	85.48th	v2 (v2022.01.01)
Apr 1, 2022	3.78% (0.03779)	84.01th	v2 (v2022.01.01)
Feb 4, 2022	3.78% (0.03779)	67.21th	v2 (v2022.01.01)

Weaknesses (1)

CWE-20

Improper Input Validation

References (22)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b6707a50c7598a83820077393f8823ab791abf8
x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.26-rc6
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html
vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/30719
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/30901
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/30920
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/31107
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/31202
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1020297
vdb-entryx_refsource_SECTRACK
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207
x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
vendor-advisoryx_refsource_MANDRIVA
http://www.openwall.com/lists/oss-security/2008/06/19/3
mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/29747
vdb-entryx_refsource_BIDPatch
http://www.ubuntu.com/usn/usn-625-1
vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2008/1854
vdb-entryx_refsource_VUPEN
https://access.redhat.com/security/cve/CVE-2008-2750
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=452096
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/43111
vdb-entryx_refsource_XF
https://issues.rpath.com/browse/RPL-2629
x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2008-2750
https://www.cve.org/CVERecord?id=CVE-2008-2750
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html
vendor-advisoryx_refsource_FEDORA

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b6707a50c7598a83820077393f8823ab791abf8		x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.26-rc6		x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html		vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/30719		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/30901		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/30920		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/31107		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/31202		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1020297		vdb-entryx_refsource_SECTRACK
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207		x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2008:167		vendor-advisoryx_refsource_MANDRIVA
http://www.openwall.com/lists/oss-security/2008/06/19/3		mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/29747		vdb-entryx_refsource_BIDPatch
http://www.ubuntu.com/usn/usn-625-1		vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2008/1854		vdb-entryx_refsource_VUPEN
https://access.redhat.com/security/cve/CVE-2008-2750		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=452096		Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/43111		vdb-entryx_refsource_XF
https://issues.rpath.com/browse/RPL-2629		x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2008-2750
https://www.cve.org/CVERecord?id=CVE-2008-2750
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html		vendor-advisoryx_refsource_FEDORA