9.8

CVE-2020-8597

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wago ≫ Pfc Firmware Version < 03.04.10\(16\)
   Wago ≫ Pfc100 Version -
   Wago ≫ Pfc200 Version -
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 19.04
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 19.58% 0.971
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00006.html
Third Party Advisory
Mailing List
http://packetstormsecurity.com/files/156662/pppd-2.4.8-Buffer-Overflow.html
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156802/pppd-2.4.8-Buffer-Overflow.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Mar/6
Third Party Advisory
Mailing List
https://access.redhat.com/errata/RHSA-2020:0630
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0631
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0633
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0634
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-809841.pdf
Third Party Advisory
https://github.com/paulusmack/ppp/commit/8d7970b8f3db727fe798b65f3377fe6787575426
Patch
Third Party Advisory
https://kb.netgear.com/000061806/Security-Advisory-for-Unauthenticated-Remote-Buffer-Overflow-Attack-in-PPPD-on-WAC510-PSV-2020-0136
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/02/msg00005.html
Third Party Advisory
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNJNHWOO4XF73M2W56ILZUY4JQG3JXIR/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOFDAIOWSWPG732ASYUZNINMXDHY4APE/
https://security.gentoo.org/glsa/202003-19
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200313-0004/
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-224-04
Third Party Advisory
US Government Resource
https://usn.ubuntu.com/4288-1/
Third Party Advisory
https://usn.ubuntu.com/4288-2/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4632
Third Party Advisory
https://www.kb.cert.org/vuls/id/782301
Third Party Advisory
US Government Resource
https://www.synology.com/security/advisory/Synology_SA_20_02
Third Party Advisory