CVE-2020-8597
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2020-8597 ppp Corrigé dans: 2.4.7-r7
- Debian DEBIAN-CVE-2020-8597 lwip Corrigé dans: 2.1.2+dfsg1-5
- Ubuntu UBUNTU-CVE-2020-8597 ppp Corrigé dans: 2.4.5-5.1ubuntu2.3+esm1
Références
- advisory lists.opensuse.org
- advisory packetstormsecurity.com
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory cert-portal.siemens.com
- advisory kb.netgear.com
- advisory lists.debian.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory us-cert.cisa.gov
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory debian.org
- advisory kb.cert.org
- advisory synology.com
- patch github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org