Red Hat Security Advisory

RHSA-2020:0634

ppp security update

Released 2020-02-27 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2020-06893 CVE-2020-8597 · GHSA-gw8r-xfqw-vw42

HIGH 67

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19925 Published 2020-02-03 Partial fix CWE-120