Red Hat Security AdvisoryRHSA-2020:0631
ppp security update
Released 2020-02-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) ppp-2.4.5-11.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) ppp-devel-2.4.5-11.el6_10
- Red Hat Enterprise Linux HPC Node (v. 6) ppp-2.4.5-11.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ppp-devel-2.4.5-11.el6_10
- Red Hat Enterprise Linux Server (v. 6) ppp-2.4.5-11.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) ppp-devel-2.4.5-11.el6_10, ppp-devel-2.4.5-11.el6_10.ppc
- Red Hat Enterprise Linux Workstation (v. 6) ppp-2.4.5-11.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) ppp-devel-2.4.5-11.el6_10
Fixes 1 record
Priority HIGH 67
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.19925 · Published 2020-02-03 · Partial fix CWE-120
