CVE-2007-0244: Poptop Pptp Server

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connection tear-down) via (1) GRE packets with out-of-order sequence numbers or (2) certain GRE packets that are processed using a wrong pointer and improperly dequeued.

Affected products

• Poptop Pptp Server: up to and including 1.3.3

Published 2007-05-11. Last modified 2026-06-16.