eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ppp-develUpgrade ppp | May 4, 2022 | Feb 3, 2020 |
| Alpine Linux | — | Upgrade ppp | Mar 26, 2024 | Feb 3, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ppp-develUpgrade pppUpgrade ppp-debuginfo | Apr 27, 2020 | Feb 3, 2020 |
| Amazon_linux | — | Upgrade ppp | Jun 4, 2020 | Feb 3, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 3, 2020 |
| Centos_linux | — | Upgrade ppp-develUpgrade pppUpgrade ppp-debugsourceUpgrade ppp-debuginfo | Feb 28, 2020 | Feb 3, 2020 |
| Debian | — | Upgrade pppUpgrade lwip | Feb 11, 2020 | Feb 3, 2020 |
| Gentoo Linux | — | Upgrade net-dialup/ppp. | Mar 16, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ppp | Jun 17, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ppp | Apr 16, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ppp | Mar 24, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pppUpgrade network-scripts-ppp | Mar 24, 2020 | Feb 3, 2020 |
| Oracle_linux | — | Upgrade ppp-develUpgrade ppp | Mar 2, 2020 | Feb 3, 2020 |
| Redhat_linux | — | Upgrade ppp-debuginfoUpgrade pppUpgrade network-scripts-pppUpgrade ppp-debugsourceUpgrade ppp-develNo solution exists | Feb 28, 2020 | Feb 3, 2020 |
| Rocky_linux | — | Upgrade ppp-debugsourceUpgrade ppp-develUpgrade ppp-debuginfoUpgrade ppp | Mar 12, 2024 | Feb 3, 2020 |
| Suse | — | Upgrade ppp-develUpgrade pppUpgrade ppp-modem | Mar 3, 2020 | Feb 3, 2020 |
| Ubuntu | — | Upgrade liblwip-dev (Ubuntu Pro)Upgrade liblwip-doc (Ubuntu Pro)Upgrade pppUpgrade liblwip0 (Ubuntu Pro)Upgrade ppp (Ubuntu Pro) | Mar 2, 2020 | Feb 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub