eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ppp-develUpgrade ppp | May 4, 2022 | Feb 3, 2020 |
| Alpine Linux | — | Upgrade ppp | Mar 26, 2024 | Feb 3, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ppp-develUpgrade ppp-debuginfoUpgrade ppp | Apr 27, 2020 | Feb 3, 2020 |
| Amazon_linux | — | Upgrade ppp | Jun 4, 2020 | Feb 3, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 3, 2020 |
| Centos_linux | — | Upgrade ppp-debuginfoUpgrade pppUpgrade ppp-debugsourceUpgrade ppp-devel | Feb 28, 2020 | Feb 3, 2020 |
| Debian | — | Upgrade lwipUpgrade ppp | Feb 11, 2020 | Feb 3, 2020 |
| Gentoo Linux | — | Upgrade net-dialup/ppp. | Mar 16, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ppp | Jun 17, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ppp | Apr 16, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ppp | Mar 24, 2020 | Feb 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pppUpgrade network-scripts-ppp | Mar 24, 2020 | Feb 3, 2020 |
| Oracle_linux | — | Upgrade pppUpgrade ppp-devel | Mar 2, 2020 | Feb 3, 2020 |
| Redhat_linux | — | Upgrade pppUpgrade network-scripts-pppUpgrade ppp-debuginfoUpgrade ppp-debugsourceUpgrade ppp-develNo solution exists | Feb 28, 2020 | Feb 3, 2020 |
| Rocky_linux | — | Upgrade ppp-debuginfoUpgrade pppUpgrade ppp-develUpgrade ppp-debugsource | Mar 12, 2024 | Feb 3, 2020 |
| Suse | — | Upgrade ppp-modemUpgrade ppp-develUpgrade ppp | Mar 3, 2020 | Feb 3, 2020 |
| Ubuntu | — | Upgrade liblwip-doc (Ubuntu Pro)Upgrade liblwip-dev (Ubuntu Pro)Upgrade pppUpgrade ppp (Ubuntu Pro)Upgrade liblwip0 (Ubuntu Pro) | Mar 2, 2020 | Feb 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub