EulerOS 2.0 SP8 : ppp (EulerOS-SA-2020-1294)

According to the version of the ppp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions.CVE-2020-8597 Note that Tenable...

Check Point Response to CVE-2020-8597 - PPP buffer overflow vulnerability

Cause The bounds check for the rhostname was improperly constructed in the EAP request and response functions, which could allow a buffer overflow to occur. Configuring to connect to a malicious server can expose the system to this vulnerability. Symptoms - A buffer overflow flaw was found in the...

Fedora: Security Advisory for openfortivpn (FEDORA-2020-dcdffcc368)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: openfortivpn-1.12.0-1.fc32

openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd process and operates the communication between the gateway and this process. It is compatible with Fortinet VPNs...

GLSA-202003-19 : PPP: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-19 PPP: Buffer overflow It was discovered that bounds check in PPP for the rhostname was improperly constructed in the EAP request and response functions. Impact : A remote attacker, by sending specially crafted...

Logic Flaw Vulnerability in Accel-PPP

ACCEL-PPP is a high-performance VPN server application for Linux. ACCEL-PPP suffers from a logic flaw vulnerability that can be exploited by an attacker to compromise confidentiality...

Security fix for the ALT Linux 9 package ppp version 2.4.7-alt6

2.4.7-alt6 built March 13, 2020 Alexey Shabalin in task 247576 --- March 10, 2020 Alexey Shabalin - Fixed: CVE-2020-8597...

MGASA-2020-0139 Updated ppp packages fix security vulnerability

Updated ppp packages fix security vulnerability: Ilja Van Sprundel discovered a buffer overflow vulnerability in ppp. When receiving an EAP Request message in client mode, an attacker was able to overflow the rhostname array by providing a very long name CVE-2020-8597...

Updated ppp packages fix security vulnerability

Updated ppp packages fix security vulnerability: Ilja Van Sprundel discovered a buffer overflow vulnerability in ppp. When receiving an EAP Request message in client mode, an attacker was able to overflow the rhostname array by providing a very long name CVE-2020-8597...

Fedora: Security Advisory for ppp (FEDORA-2020-4304397fe0)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : ppp (2020-4304397fe0)

This is an update fixing CVE-2020-8597. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

[SECURITY] Fedora 31 Update: ppp-2.4.7-34.fc31

The ppp package contains the PPP Point-to-Point Protocol daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an ISP Internet Service Provider or other organization over a modem...

Exploit for Classic Buffer Overflow in Point-To-Point_Protocol_Project Point-To-Point_Protocol

PoC exploit for CVE-2020-8597, a buffer overflow vulnerability in the eap.c file of the pppd daemon in ppp versions 2.4.2 through 2.4.8. The vulnerability allows for a buffer overflow in the eaprequest and eapresponse functions, which can be exploited by sending a long "EAP: unauthenticated peer...

Amazon Linux 2 : ppp (ALAS-2020-1400)

The version of ppp installed on the remote host is prior to 2.4.5-33. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1400 advisory. eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. CVE-2020-8597...

Fedora 30 : ppp (2020-571091c70b)

This is an update fixing CVE-2020-8597. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

[SECURITY] Fedora 30 Update: ppp-2.4.7-34.fc30

The ppp package contains the PPP Point-to-Point Protocol daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an ISP Internet Service Provider or other organization over a modem...

Fedora: Security Advisory for ppp (FEDORA-2020-571091c70b)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[ASA-202003-3] ppp: arbitrary code execution

Arch Linux Security Advisory ASA-202003-3 ========================================= Severity: Medium Date : 2020-03-07 CVE-ID : CVE-2020-8597 Package : ppp Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1101 Summary ======= The package ppp before version...

[SECURITY] Fedora 30 Update: openfortivpn-1.12.0-1.fc30

openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd process and operates the communication between the gateway and this process. It is compatible with Fortinet VPNs...

Slackware 14.0 / 14.1 / 14.2 / current : ppp (SSA:2020-064-01)

New ppp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-064-01. The text itself is copyright C Slackware Linux,...