Log in Start free

Vulnerability · Published Feb 3, 2020 · Assigned by mitre

CVE-2020-8597

Critical 9.8

In plain English

A critical-severity buffer overflow in the ppp package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 19.9% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)19.9%top 2.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8ppp2.4.7-26.el8_1ALSA-2020:0633
AlmaLinux:8ppp-devel2.4.7-26.el8_1ALSA-2020:0633
Alpine:v3.20ppp2.4.8-r1ALPINE-CVE-2020-8597
Alpine:v3.21ppp2.4.8-r1ALPINE-CVE-2020-8597
Alpine:v3.22ppp2.4.8-r1ALPINE-CVE-2020-8597
Alpine:v3.23ppp2.4.8-r1ALPINE-CVE-2020-8597
Alpine:v3.24ppp2.4.8-r1ALPINE-CVE-2020-8597
Debian:12lwip2.1.2+dfsg1-5DEBIAN-CVE-2020-8597
Debian:13lwip2.1.2+dfsg1-5DEBIAN-CVE-2020-8597
Debian:14lwip2.1.2+dfsg1-5DEBIAN-CVE-2020-8597
Debian:12ppp2.4.8-1+1DEBIAN-CVE-2020-8597
Debian:13ppp2.4.8-1+1DEBIAN-CVE-2020-8597
Debian:14ppp2.4.8-1+1DEBIAN-CVE-2020-8597
Rocky Linux:8ppp0:2.4.7-26.el8_1RLSA-2020:0633

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References