ppp bug fix and enhancement update

An update is available for ppp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

ALBA-2020:1919 ppp bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

CVE-2020-8037

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2020-1426)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : ppp (EulerOS-SA-2020-1426)

According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions.CVE-2020-8597 - Buffer overflo...

Privilege Escalation

kernel is vulnerable to privilege escalation. Missing boundary checks in the PPP over L2TP sockets implementation could allow a local, unprivileged user to cause a denial of service or escalate their privileges...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the PPP over Ethernet implementation that allowed a remote user to cause a denial of service...

CVE-2020-8597

A buffer overflow flaw was found in the ppp package in versions 2.4.2 through 2.4.8. The bounds check for the rhostname was improperly constructed in the EAP request and response functions which could allow a buffer overflow to occur. Data confidentiality and integrity, as well as system...

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2020-1319)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2020-1294)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : ppp (EulerOS-SA-2020-1319)

According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions.CVE-2020-8597 Note that Tenable...

EulerOS 2.0 SP8 : ppp (EulerOS-SA-2020-1294)

According to the version of the ppp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions.CVE-2020-8597 Note that Tenable...

Check Point Response to CVE-2020-8597 - PPP buffer overflow vulnerability

Cause The bounds check for the rhostname was improperly constructed in the EAP request and response functions, which could allow a buffer overflow to occur. Configuring to connect to a malicious server can expose the system to this vulnerability. Symptoms - A buffer overflow flaw was found in the...

Fedora: Security Advisory for openfortivpn (FEDORA-2020-dcdffcc368)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: openfortivpn-1.12.0-1.fc32

openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd process and operates the communication between the gateway and this process. It is compatible with Fortinet VPNs...

GLSA-202003-19 : PPP: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-19 PPP: Buffer overflow It was discovered that bounds check in PPP for the rhostname was improperly constructed in the EAP request and response functions. Impact : A remote attacker, by sending specially crafted...

Logic Flaw Vulnerability in Accel-PPP

ACCEL-PPP is a high-performance VPN server application for Linux. ACCEL-PPP suffers from a logic flaw vulnerability that can be exploited by an attacker to compromise confidentiality...

Security fix for the ALT Linux 9 package ppp version 2.4.7-alt6

2.4.7-alt6 built March 13, 2020 Alexey Shabalin in task 247576 --- March 10, 2020 Alexey Shabalin - Fixed: CVE-2020-8597...

MGASA-2020-0139 Updated ppp packages fix security vulnerability

Updated ppp packages fix security vulnerability: Ilja Van Sprundel discovered a buffer overflow vulnerability in ppp. When receiving an EAP Request message in client mode, an attacker was able to overflow the rhostname array by providing a very long name CVE-2020-8597...

Updated ppp packages fix security vulnerability

Updated ppp packages fix security vulnerability: Ilja Van Sprundel discovered a buffer overflow vulnerability in ppp. When receiving an EAP Request message in client mode, an attacker was able to overflow the rhostname array by providing a very long name CVE-2020-8597...