codeql-buffer-overflow-variant

codeql-buffer-overflow-variant pppd의 함수 이름, 호출 깊이, 디스패치 구조를 전혀 공유하지 않는 프로그램에서 CVE-2020-8597 — pppd EAP rhostname 스택 버퍼 오버플로CWE-120 — 의 버그 클래스 를 재현한, 의도적으로 취약한 약 170줄짜리 C 프로그램으로, CodeQL 정적 분석 타깃 으로 사용됩니다. 목표는 일반성 테스트 입니다. pppd 버그를 잡기 위해 작성된 CodeQL 쿼리가 수정 없이 이 프로그램에서도 발동해야 합니다. 그렇다면 그 쿼리는 원본 코드의 형태...

CVE-2020-8597

В этом репозитории нет README...

Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-

Point-to-Point-Protocol-Daemon-RCE-취약점-CVE-2020-8597- 스리랑카 정보기술 연구소 root@kitploit: 과제 1 M. P. D. M. Dias IT19165530 MLBWDY2S113.1 지점간 프로토콜 데몬 RCE 취약점 CVE-2020-8597 시스템 및 네트워크 프로그래밍– IE2012 목차 1. 소개 2. 취약점 발견자 참조 3. 발견 방법 4. 발견 시기 5. 초래할 수 있는 피해 6. 공격 기술 7. 선택한 공격 방법 8. 익스플로잇 스크린샷 9. 결론 10. 참고문헌 소...

Azure Linux 3.0 Security Update: ppp (CVE-2020-8597)

The version of ppp installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-8597 advisory. - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse...

MiracleLinux 7 : ppp-2.4.5-34.el7 (AXSA:2020-4481:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4481:01 advisory. ppp: Buffer overflow in the eaprequest and eapresponse functions in eap.c CVE-2020-8597 Tenable has extracted the preceding description block directly from t...

TencentOS Server 3: ppp (TSSA-2022:0071)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0071 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2020-8597 affecting package ppp for versions less than 2.4.7-36

CVE-2020-8597 affecting package ppp for versions less than 2.4.7-36. A patched version of the package is available...

ROS-2-450

2.450 Vulnerability in PPPD CVE-2020-8597 1. Vulnerability Description: The issue CVE-2020-8597 is a stack buffer overflow vulnerability resulting from a logic error in the EAP Extensible Authentication Protocol packet parser in PPPD eaprequest and eapresponse functions in eap.c. The vulnerabilit...

SUSE CVE-2020-8597

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions...

AlmaLinux 8 : ppp (ALSA-2020:0633)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:0633 advisory. - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. CVE-2020-8597 Note that Nessus has not...

ROS-2-1225

2.1225 Vulnerability in PPPD CVE-2020-8597 1. Vulnerability Description: The issue CVE-2020-8597 is a stack buffer overflow vulnerability resulting from a logic error in the EAP Extensible Authentication Protocol packet parser in PPPD eaprequest and eapresponse functions in eap.c. The...

ROS-2-807

2.807 Vulnerability in PPPD CVE-2020-8597 1. Vulnerability Description: The issue CVE-2020-8597 is a stack buffer overflow vulnerability resulting from a logic error in the EAP Extensible Authentication Protocol packet parser in PPPD eaprequest and eapresponse functions in eap.c. The vulnerabilit...

SUSE SLES11 Security Update : ppp (SUSE-SU-2020:14292-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2020:14292-1 advisory. - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. CVE-2020-8597 Note that Nessu...

SUSE: Security Advisory (SUSE-SU-2020:14292-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:0489-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NewStart CGSL CORE 5.05 / MAIN 5.05 : ppp Vulnerability (NS-SA-2020-0113)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ppp packages installed that are affected by a vulnerability: - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. CVE-2020-8597 Note that Nessus has not...

Siemens SCALANCE, RUGGEDCOM

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SCALANCE, RUGGEDCOM Vulnerability: Classic Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain unauthenticated access...

Important: ppp

Issue Overview: eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions.CVE-2020-8597 Affected Packages: ppp Issue Correction: Run yum update ppp or yum update --advisory ALAS-2020-1371 to update your system. New Packages: i686: ...

CVE-2020-8597

A buffer overflow flaw was found in the ppp package in versions 2.4.2 through 2.4.8. The bounds check for the rhostname was improperly constructed in the EAP request and response functions which could allow a buffer overflow to occur. Data confidentiality and integrity, as well as system...

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2020-1319)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...