Fedora: Security Advisory for openfortivpn (FEDORA-2020-c96ab3c813)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : ppp (openSUSE-2020-286)

This update for ppp fixes the following security issue : - CVE-2020-8597: Fixed a buffer overflow in the eaprequest and eapresponse functions bsc1162610. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks i...

Critical PPP Daemon Flaw Opens Most Linux Systems to Remote Hackers

The US-CERT today issued advisory warning users of a new dangerous 17-year-old remote code execution vulnerability affecting the PPP daemon pppd software that comes installed on almost all Linux based operating systems, as well as powers the firmware of many other networking devices. The affected...

[slackware-security] ppp

New ppp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ppp-2.4.8-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: By sending an unsolicited EAP packet to a...

pppd vulnerable to buffer overflow due to a flaw in EAP packet processing

Overview pppd Point to Point Protocol Daemon versions 2.4.2 through 2.4.8 are vulnerable to buffer overflow due to a flaw in Extensible Authentication Protocol EAP packet processing in eaprequest and eapresponse subroutines. Description PPP is the protocol used for establishing internet links ove...

openSUSE: Security Advisory for ppp (openSUSE-SU-2020:0286-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

USN-4288-2 ppp vulnerability

USN-4288-1 fixed a vulnerability in ppp. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ppp incorrectly handled certain rhostname values. A remote attacker could use this issue to cause ppp to crash,...

Oracle Linux 8 : ppp (ELSA-2020-0633)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0633 advisory. 2.4.7-26 - Fixed buffer overflow in the eaprequest and eapresponse functions Resolves: CVE-2020-8597 Tenable has extracted the preceding description block...

Security update for ppp (important)

openSUSE Security Update: Security update for ppp Announcement ID: openSUSE-SU-2020:0286-1 Rating: important References: 1162610 Cross-References: CVE-2020-8597 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for ppp fixes th...

RHEL 8 : ppp (RHSA-2020:0634)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:0634 advisory. The ppp packages contain the Point-to-Point Protocol PPP daemon and documentation for PPP support. The PPP protocol provides a method for transmittin...

RHEL 7 : ppp (RHSA-2020:0630)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0630 advisory. The ppp packages contain the Point-to-Point Protocol PPP daemon and documentation for PPP support. The PPP protocol provides a method for transmittin...

RHEL 8 : ppp (RHSA-2020:0633)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0633 advisory. The ppp packages contain the Point-to-Point Protocol PPP daemon and documentation for PPP support. The PPP protocol provides a method for transmittin...

Scientific Linux Security Update : ppp on SL7.x x86_64 (20200227)

Security Fixes : - ppp: Buffer overflow in the eaprequest and eapresponse functions in eap.c CVE-2020-8597 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid134151; scriptversion"1.6";...

Oracle Linux 7 : ppp (ELSA-2020-0630)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0630 advisory. 2.4.5-34.0.2 - Userland headers should always appear before kernel - Orabug: 27656836 [email protected] 2.4.5-34 - Fixed buffer overflow in the...

CentOS 7 : ppp (RHSA-2020:0630)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0630 advisory. - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. CVE-2020-8597 Note that Nessus has not...

CentOS 6 : ppp (RHSA-2020:0631)

The remote CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0631 advisory. - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. CVE-2020-8597 Note that Nessus has not...

CentOS: Security Advisory for ppp (CESA-2020:0631)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for ppp (CESA-2020:0630)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Scientific Linux Security Update : ppp on SL6.x i386/x86_64 (20200227)

Security Fixes : - ppp: Buffer overflow in the eaprequest and eapresponse functions in eap.c CVE-2020-8597 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid134150; scriptversion"1.6";...

RHEL 6 : ppp (RHSA-2020:0631)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0631 advisory. The ppp packages contain the Point-to-Point Protocol PPP daemon and documentation for PPP support. The PPP protocol provides a method for transmittin...