Red Hat Security Advisory

RHSA-2020:0630

ppp security update

Released 2020-02-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) ppp-2.4.5-34.el7_7
Red Hat Enterprise Linux Client Optional (v. 7) ppp-devel-2.4.5-34.el7_7
Red Hat Enterprise Linux ComputeNode (v. 7) ppp-2.4.5-34.el7_7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) ppp-devel-2.4.5-34.el7_7
Red Hat Enterprise Linux Server (v. 7) ppp-2.4.5-34.el7_7
Red Hat Enterprise Linux Server Optional (v. 7) ppp-devel-2.4.5-34.el7_7, ppp-devel-2.4.5-34.el7_7.ppc
Red Hat Enterprise Linux Workstation (v. 7) ppp-2.4.5-34.el7_7
Red Hat Enterprise Linux Workstation Optional (v. 7) ppp-devel-2.4.5-34.el7_7

TI-2020-06893 CVE-2020-8597 · GHSA-gw8r-xfqw-vw42

HIGH 67

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19925 Published 2020-02-03 Partial fix CWE-120