eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pppUpgrade ppp-devel | May 4, 2022 | Feb 3, 2020 |
| Alpine Linux | — | Upgrade ppp | Mar 26, 2024 | Feb 3, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ppp-debuginfoUpgrade pppUpgrade ppp-devel | Apr 27, 2020 | Feb 3, 2020 |
| Amazon_linux | — | Upgrade ppp | Jun 4, 2020 | Feb 3, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 3, 2020 |
| Centos_linux | — | Upgrade pppUpgrade ppp-debugsourceUpgrade ppp-develUpgrade ppp-debuginfo | Feb 28, 2020 | Feb 3, 2020 |
| Debian | — | Upgrade lwipUpgrade ppp | Feb 11, 2020 | Feb 3, 2020 |
| Gentoo Linux | — | Upgrade net-dialup/ppp. | Mar 16, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ppp | Jun 17, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ppp | Apr 16, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ppp | Mar 24, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade network-scripts-pppUpgrade ppp | Mar 24, 2020 | Feb 3, 2020 |
| Oracle_linux | — | Upgrade ppp-develUpgrade ppp | Mar 2, 2020 | Feb 3, 2020 |
| Redhat_linux | — | Upgrade pppUpgrade ppp-debuginfoUpgrade network-scripts-pppUpgrade ppp-develUpgrade ppp-debugsourceNo solution exists | Feb 28, 2020 | Feb 3, 2020 |
| Rocky_linux | — | Upgrade ppp-debugsourceUpgrade ppp-develUpgrade pppUpgrade ppp-debuginfo | Mar 12, 2024 | Feb 3, 2020 |
| Suse | — | Upgrade ppp-modemUpgrade ppp-develUpgrade ppp | Mar 3, 2020 | Feb 3, 2020 |
| Ubuntu | — | Upgrade liblwip0 (Ubuntu Pro)Upgrade ppp (Ubuntu Pro)Upgrade pppUpgrade liblwip-dev (Ubuntu Pro)Upgrade liblwip-doc (Ubuntu Pro) | Mar 2, 2020 | Feb 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub