Lucene search
+L

1368 matches found

UbuntuCve
UbuntuCve
•added 2020/02/03 11:15 p.m.•37 views

CVE-2020-8597

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions...

9.8CVSS7.4AI score0.19925EPSS
SaveExploits3References4
Prion
Prion
•added 2020/02/03 11:15 p.m.•41 views

Buffer overflow

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions...

7.5CVSS9.6AI score0.19925EPSS
SaveExploits3References22Affected Software4
Vulnrichment
Vulnrichment
•added 2020/02/03 10:58 p.m.•9 views

CVE-2020-8597

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions...

7.1AI score0.19925EPSS
SaveExploits3References22
Cvelist
Cvelist
•added 2020/02/03 10:58 p.m.•52 views

CVE-2020-8597

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions...

10AI score0.19925EPSS
SaveExploits3References22
CVE
CVE
•added 2020/02/03 10:58 p.m.•1675 views

CVE-2020-8597

CVE-2020-8597 affects pppd (PPP) versions 2.4.2–2.4.8, due to an incorrect bounds check in the eap_request/eap_response handling that allows a stack buffer overflow on the rhostname. A remote, unauthenticated attacker could cause memory corruption and potentially execute arbitrary code in the ppp...

9.8CVSS8.4AI score0.19925EPSS
SaveExploits3References22Affected Software1
AlpineLinux
AlpineLinux
•added 2020/02/03 10:58 p.m.•38 views

CVE-2020-8597

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions...

9.8CVSS8.7AI score0.19925EPSS
SaveExploits3
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•10 views

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2019-1987)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.5AI score0.03546EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•16 views

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2019-2399)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.05405EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2019-2298)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS9.6AI score0.05405EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•11 views

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2019-2652)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.5AI score0.03546EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/12/18 12:00 a.m.•25 views

EulerOS 2.0 SP3 : ppp (EulerOS-SA-2019-2652)

According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to 'access privileged options' vi...

7.5CVSS8.4AI score0.03546EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/12/10 12:00 a.m.•35 views

EulerOS 2.0 SP2 : ppp (EulerOS-SA-2019-2399)

According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than...

7.5CVSS8.3AI score0.05405EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2019/11/27 12:00 a.m.•25 views

EulerOS 2.0 SP8 : ppp (EulerOS-SA-2019-2298)

According to the version of the ppp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than...

4.3CVSS8.2AI score0.05405EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/11/08 12:00 a.m.•35 views

EulerOS 2.0 SP5 : ppp (EulerOS-SA-2019-2183)

According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The ppp package contains the PPP Point-to-Point Protocol daemon and documentation for PPP support. The PPP protocol provides a method for transmitting...

4.3CVSS8.1AI score0.05405EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/09/26 12:00 a.m.•16 views

Cisco IOS XE ISDN Data Leakage Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. A data leakage vulnerability exists in the Dialer interface feature for ISDN connections in Cisco IOS XE for Cisco 4000 Series Integrated Services Routers. The vulnerability stems from insufficient validation o...

7.5CVSS7AI score0.01425EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/25 9:15 p.m.•29 views

CVE-2019-12664

A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs could allow an unauthenticated, adjacent attacker to pass IPv4 traffic through an ISDN channel prior to successful PPP authentication. The...

7.5CVSS6.5AI score0.01425EPSS
SaveExploits0References1
Prion
Prion
•added 2019/09/25 9:15 p.m.•16 views

Input validation

A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs could allow an unauthenticated, adjacent attacker to pass IPv4 traffic through an ISDN channel prior to successful PPP authentication. The...

5CVSS7.9AI score0.01425EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2019/09/25 8:16 p.m.•9 views

CVE-2019-12664 Cisco IOS XE Software ISDN Data Leak Vulnerability

A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs could allow an unauthenticated, adjacent attacker to pass IPv4 traffic through an ISDN channel prior to successful PPP authentication. The...

4.7CVSS7.5AI score0.01425EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/09/25 8:16 p.m.•37 views

CVE-2019-12664 Cisco IOS XE Software ISDN Data Leak Vulnerability

A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs could allow an unauthenticated, adjacent attacker to pass IPv4 traffic through an ISDN channel prior to successful PPP authentication. The...

4.7CVSS8AI score0.01425EPSS
SaveExploits0References1
CVE
CVE
•added 2019/09/25 8:16 p.m.•111 views

CVE-2019-12664

Cisco IOS XE Software on Cisco 4000 Series ISRs has a data leak vulnerability in the Dialer interface for ISDN, due to insufficient validation of IPCP state. An unauthenticated adjacent attacker can pass IPv4 traffic through an ISDN channel before PPP authentication succeeds, either by placing an...

7.5CVSS6.5AI score0.01425EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder