High ELSA-2020-0633 1 CVE

Important: ppp security update (Oracle Linux 8)

Published Feb 27, 2020 · Updated Feb 27, 2020

Ecosystem: Oracle Linux

Summary

[2.4.7-26]
- Fixed buffer overflow in the eap_request and eap_response functions
Resolves: CVE-2020-8597

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	ppp	0:2.4.7-26.el8_1
Oracle Linux · 8	ppp-devel	0:2.4.7-26.el8_1

Vulnerabilities 1

Critical 9.8

CVE-2020-8597 Public exploit EPSS 20%

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

ppp lwip lwip ppp Debian Ubuntu Azure Linux Alpine

Feb 3, 2020