Home

CVE-2020-8597

Description

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
67.74

Associated Vulnerability

VulnerabilityOS Platform
Point-to-Point Protocol (PPP) (USN-4288-1) ppp_2.4.7-2+2ubuntu1.2_i386.debLinux
Point-to-Point Protocol (PPP) (USN-4288-1) ppp_2.4.7-2+2ubuntu1.2_amd64.debLinux
Point-to-Point Protocol (PPP) (USN-4288-1) ppp_2.4.7-2+4.1ubuntu4.1_i386.debLinux
Point-to-Point Protocol (PPP) (USN-4288-1) ppp_2.4.7-2+4.1ubuntu4.1_amd64.debLinux
Point-to-Point Protocol (PPP) (USN-4288-1) ppp_2.4.7-1+2ubuntu1.16.04.2_i386.debLinux
Point-to-Point Protocol (PPP) (USN-4288-1) ppp_2.4.7-1+2ubuntu1.16.04.2_amd64.debLinux
ppp security update(DSA-4632-1) ppp_2.4.7-1+4+deb9u1_i386.debLinux
ppp security update(DSA-4632-1) ppp_2.4.7-1+4+deb9u1_amd64.debLinux
ppp security update(DSA-4632-1) ppp_2.4.7-2+4.1+deb10u1_i386.debLinux
ppp security update(DSA-4632-1) ppp_2.4.7-2+4.1+deb10u1_amd64.debLinux
SUSE-SU-2020:0490-1(SUSE Linux Enterprise Desktop 12-SP4 ) ppp-2.4.7-4.3.1.x86_64.rpmLinux
SUSE-SU-2020:0490-1(SUSE Linux Enterprise Desktop 12-SP4 ) ppp-debuginfo-2.4.7-4.3.1.x86_64.rpmLinux
SUSE-SU-2020:0490-1(SUSE Linux Enterprise Desktop 12-SP4 ) ppp-debugsource-2.4.7-4.3.1.x86_64.rpmLinux
(RHSA-2020:0630) ppp security update ppp-2.4.5-34.el7_7.x86_64.rpmLinux
(RHSA-2020:0630) ppp security update ppp-devel-2.4.5-34.el7_7.i686.rpmLinux
(RHSA-2020:0630) ppp security update ppp-devel-2.4.5-34.el7_7.x86_64.rpmLinux
(RHSA-2020:0631) ppp security update ppp-2.4.5-11.el6_10.i686.rpmLinux
(RHSA-2020:0631) ppp security update ppp-2.4.5-11.el6_10.x86_64.rpmLinux
(RHSA-2020:0631) ppp security update ppp-devel-2.4.5-11.el6_10.i686.rpmLinux
(RHSA-2020:0631) ppp security update ppp-devel-2.4.5-11.el6_10.x86_64.rpmLinux
Ppp update (ELSA-2020-0633) ppp-2.4.7-26.el8_1.x86_64.rpmLinux
Ppp-devel update (ELSA-2020-0633) ppp-devel-2.4.7-26.el8_1.x86_64.rpmLinux
Ppp update (ELSA-2020-0633) ppp-2.4.7-26.el8_1.i686.rpmLinux
Ppp-devel update (ELSA-2020-0633) ppp-devel-2.4.7-26.el8_1.i686.rpmLinux
SUSE-SU-2020:0490-1(SUSE Linux Enterprise Server 12-SP5 ) ppp-2.4.7-4.3.1.x86_64_12_SP5.rpmLinux
SUSE-SU-2020:0490-1(SUSE Linux Enterprise Server 12-SP5 ) ppp-debuginfo-2.4.7-4.3.1.x86_64_12_SP5.rpmLinux
SUSE-SU-2020:0490-1(SUSE Linux Enterprise Server 12-SP5 ) ppp-debugsource-2.4.7-4.3.1.x86_64_12_SP5.rpmLinux
(RHSA-2020:0630)Important: security update ppp-debuginfo-2.4.5-34.el7_7.i686.rpmLinux
(RHSA-2020:0630)Important: security update ppp-debuginfo-2.4.5-34.el7_7.x86_64.rpmLinux
(RHSA-2020:0633)Important: security update ppp-debuginfo-2.4.7-26.el8_1.x86_64.rpmLinux
ppp security update (RLSA-2020:0633) ppp-2.4.7-26.el8_1.x86_64.rpmLinux
ppp Security Update (ALAS-2020-1400) ppp-2.4.5-33.amzn2.0.3.x86_64.rpmLinux
ppp Security Update (ALAS-2020-1400) ppp-devel-2.4.5-33.amzn2.0.3.x86_64.rpmLinux
Important: ppp security update ppp-2.4.7-26.el8_1.x86_64.rpmLinux
Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Vulnerability (CVE-2020-8597)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234