NetSight
IP …
critical9.8

CVE-2020-8597

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

Impact

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

Affected products

VendorProductAffected versions
Point-To-Point Protocol ProjectPoint-To-Point Protocol
from 2.4.2 through 2.4.8
WagoPfc Firmware
before 03.04.10\(16\)
DebianDebian Linux
Versions 9.0, 10.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 19.04

Weakness classification

CWE-120

References