Vulnerabilities > CVE-2020-8597 - Classic Buffer Overflow vulnerability in multiple products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

point-to-point-protocol-project

critical

nessus

NVD

Published: 2020-02-03

Updated: 2023-11-07

Summary

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

Vulnerable Configurations

Part	Description	Count
Application	Point-To-Point_Protocol_Project Point TO Point Protocol Project Point TO Point Protocol 2.4.2 Point TO Point Protocol Project Point TO Point Protocol 2.4.3 Point TO Point Protocol Project Point TO Point Protocol 2.4.4 Point TO Point Protocol Project Point TO Point Protocol 2.4.5 Point TO Point Protocol Project Point TO Point Protocol 2.4.6 Point TO Point Protocol Project Point TO Point Protocol 2.4.7 Point TO Point Protocol Project Point TO Point Protocol 2.4.8	7
OS	Wago Wago PFC Firmware 03.00.35$12$ Wago PFC Firmware 03.00.39$12.1$ Wago PFC Firmware 03.03.10$15$ Wago PFC Firmware 03.03.11$15.1$ Wago PFC Firmware 03.04.04$14$	5
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2
OS	Canonical Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04	5
Hardware	Wago Wago Pfc100 - Wago Pfc200 -	2

Common Weakness Enumeration (CWE)

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Common Attack Pattern Enumeration and Classification (CAPEC)

Buffer Overflow via Environment Variables
This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
Overflow Buffers
Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
Client-side Injection-induced Buffer Overflow
This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service.
Filter Failure through Buffer Overflow
In this attack, the idea is to cause an active filter to fail by causing an oversized transaction. An attacker may try to feed overly long input strings to the program in an attempt to overwhelm the filter (by causing a buffer overflow) and hoping that the filter does not fail securely (i.e. the user input is let into the system unfiltered).
MIME Conversion
An attacker exploits a weakness in the MIME conversion routine to cause a buffer overflow and gain control over the mail server machine. The MIME system is designed to allow various different information formats to be interpreted and sent via e-mail. Attack points exist when data are converted to MIME compatible format and back.

Nessus

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2020-0631.NASL
description	An update for ppp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-18
modified	2020-02-28
plugin id	134145
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134145
title	RHEL 6 : ppp (RHSA-2020:0631)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2020:0631. The text # itself is copyright (C) Red Hat, Inc. # include("compat.inc"); if (description) { script_id(134145); script_version("1.3"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/11"); script_cve_id("CVE-2020-8597"); script_xref(name:"RHSA", value:"2020:0631"); script_name(english:"RHEL 6 : ppp (RHSA-2020:0631)"); script_summary(english:"Checks the rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value:"The remote Red Hat host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "An update for ppp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section." ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2020:0631" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2020-8597" ); script_set_attribute( attribute:"solution", value:"Update the affected ppp, ppp-debuginfo and / or ppp-devel packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ppp"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ppp-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ppp-devel"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6"); script_set_attribute(attribute:"vuln_publication_date", value:"2020/02/03"); script_set_attribute(attribute:"patch_publication_date", value:"2020/02/27"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/28"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Red Hat Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat"); os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat"); os_ver = os_ver[1]; if (! preg(pattern:"^6([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 6.x", "Red Hat " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu); yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo"); if (!empty_or_null(yum_updateinfo)) { rhsa = "RHSA-2020:0631"; yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa); if (!empty_or_null(yum_report)) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : yum_report ); exit(0); } else { audit_message = "affected by Red Hat security advisory " + rhsa; audit(AUDIT_OS_NOT, audit_message); } } else { flag = 0; if (rpm_check(release:"RHEL6", cpu:"i686", reference:"ppp-2.4.5-11.el6_10")) flag++; if (rpm_check(release:"RHEL6", cpu:"s390x", reference:"ppp-2.4.5-11.el6_10")) flag++; if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"ppp-2.4.5-11.el6_10")) flag++; if (rpm_check(release:"RHEL6", reference:"ppp-debuginfo-2.4.5-11.el6_10")) flag++; if (rpm_check(release:"RHEL6", reference:"ppp-devel-2.4.5-11.el6_10")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() + redhat_report_package_caveat() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ppp / ppp-debuginfo / ppp-devel"); } }

NASL family	Scientific Linux Local Security Checks
NASL id	SL_20200227_PPP_ON_SL7_X.NASL
description	Security Fix(es) : - ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)
last seen	2020-03-18
modified	2020-02-28
plugin id	134151
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134151
title	Scientific Linux Security Update : ppp on SL7.x x86_64 (20200227)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text is (C) Scientific Linux. # include("compat.inc"); if (description) { script_id(134151); script_version("1.3"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/11"); script_cve_id("CVE-2020-8597"); script_name(english:"Scientific Linux Security Update : ppp on SL7.x x86_64 (20200227)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value: "The remote Scientific Linux host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "Security Fix(es) : - ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)" ); # https://listserv.fnal.gov/scripts/wa.exe?A2=ind2002&L=SCIENTIFIC-LINUX-ERRATA&P=10648 script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?663f20d3" ); script_set_attribute( attribute:"solution", value:"Update the affected ppp, ppp-debuginfo and / or ppp-devel packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:ppp"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:ppp-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:ppp-devel"); script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux"); script_set_attribute(attribute:"vuln_publication_date", value:"2020/02/03"); script_set_attribute(attribute:"patch_publication_date", value:"2020/02/27"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/28"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Scientific Linux Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux"); os_ver = pregmatch(pattern: "Scientific Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Scientific Linux"); os_ver = os_ver[1]; if (! preg(pattern:"^7([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Scientific Linux 7.x", "Scientific Linux " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu); if ("x86_64" >!< cpu) audit(AUDIT_ARCH_NOT, "x86_64", cpu); flag = 0; if (rpm_check(release:"SL7", cpu:"x86_64", reference:"ppp-2.4.5-34.el7_7")) flag++; if (rpm_check(release:"SL7", cpu:"x86_64", reference:"ppp-debuginfo-2.4.5-34.el7_7")) flag++; if (rpm_check(release:"SL7", cpu:"x86_64", reference:"ppp-devel-2.4.5-34.el7_7")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ppp / ppp-debuginfo / ppp-devel"); }

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2020-0633.NASL
description	An update for ppp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-18
modified	2020-02-28
plugin id	134147
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134147
title	RHEL 8 : ppp (RHSA-2020:0633)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2020:0633. The text # itself is copyright (C) Red Hat, Inc. # include("compat.inc"); if (description) { script_id(134147); script_version("1.3"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/11"); script_cve_id("CVE-2020-8597"); script_xref(name:"RHSA", value:"2020:0633"); script_name(english:"RHEL 8 : ppp (RHSA-2020:0633)"); script_summary(english:"Checks the rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value:"The remote Red Hat host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "An update for ppp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section." ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2020:0633" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2020-8597" ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:network-scripts-ppp"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ppp"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ppp-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ppp-debugsource"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ppp-devel"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8.1"); script_set_attribute(attribute:"vuln_publication_date", value:"2020/02/03"); script_set_attribute(attribute:"patch_publication_date", value:"2020/02/27"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/28"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Red Hat Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat"); os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat"); os_ver = os_ver[1]; if (! preg(pattern:"^8([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 8.x", "Red Hat " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu); yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo"); if (!empty_or_null(yum_updateinfo)) { rhsa = "RHSA-2020:0633"; yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa); if (!empty_or_null(yum_report)) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : yum_report ); exit(0); } else { audit_message = "affected by Red Hat security advisory " + rhsa; audit(AUDIT_OS_NOT, audit_message); } } else { flag = 0; if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"network-scripts-ppp-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", sp:"1", cpu:"i686", reference:"ppp-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"ppp-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"ppp-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", sp:"1", cpu:"aarch64", reference:"ppp-debuginfo-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", sp:"1", cpu:"i686", reference:"ppp-debuginfo-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"ppp-debuginfo-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"ppp-debuginfo-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", sp:"1", cpu:"aarch64", reference:"ppp-debugsource-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", sp:"1", cpu:"i686", reference:"ppp-debugsource-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"ppp-debugsource-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"ppp-debugsource-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", sp:"1", cpu:"aarch64", reference:"ppp-devel-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", sp:"1", cpu:"i686", reference:"ppp-devel-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", sp:"1", cpu:"s390x", reference:"ppp-devel-2.4.7-26.el8_1")) flag++; if (rpm_check(release:"RHEL8", sp:"1", cpu:"x86_64", reference:"ppp-devel-2.4.7-26.el8_1")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() + redhat_report_package_caveat() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "network-scripts-ppp / ppp / ppp-debuginfo / ppp-debugsource / etc"); } }

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2020-4304397FE0.NASL
description	This is an update fixing CVE-2020-8597. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-03-18
modified	2020-03-12
plugin id	134436
published	2020-03-12
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134436
title	Fedora 31 : ppp (2020-4304397fe0)

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DSA-4632.NASL
description	Ilja Van Sprundel reported a logic flaw in the Extensible Authentication Protocol (EAP) packet parser in the Point-to-Point Protocol Daemon (pppd). An unauthenticated attacker can take advantage of this flaw to trigger a stack-based buffer overflow, leading to denial of service (pppd daemon crash).
last seen	2020-03-17
modified	2020-02-24
plugin id	133880
published	2020-02-24
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133880
title	Debian DSA-4632-1 : ppp - security update

NASL family	Amazon Linux Local Security Checks
NASL id	ALA_ALAS-2020-1371.NASL
description	eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.(CVE-2020-8597)
last seen	2020-06-10
modified	2020-06-04
plugin id	137094
published	2020-06-04
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/137094
title	Amazon Linux AMI : ppp (ALAS-2020-1371)

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2020-1426.NASL
description	According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.(CVE-2020-8597) - Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul
last seen	2020-05-06
modified	2020-04-15
plugin id	135555
published	2020-04-15
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/135555
title	EulerOS 2.0 SP3 : ppp (EulerOS-SA-2020-1426)

NASL family	NewStart CGSL Local Security Checks
NASL id	NEWSTART_CGSL_NS-SA-2020-0027_PPP.NASL
description	The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ppp packages installed that are affected by a vulnerability: - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. (CVE-2020-8597) Note that Nessus has not tested for this issue but has instead relied only on the application
last seen	2020-06-05
modified	2020-05-27
plugin id	136905
published	2020-05-27
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/136905
title	NewStart CGSL CORE 5.04 / MAIN 5.04 : ppp Vulnerability (NS-SA-2020-0027)

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2020-1294.NASL
description	According to the version of the ppp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.(CVE-2020-8597) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-05-03
modified	2020-03-23
plugin id	134786
published	2020-03-23
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134786
title	EulerOS 2.0 SP8 : ppp (EulerOS-SA-2020-1294)

NASL family	Slackware Local Security Checks
NASL id	SLACKWARE_SSA_2020-064-01.NASL
description	New ppp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
last seen	2020-03-17
modified	2020-03-06
plugin id	134277
published	2020-03-06
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134277
title	Slackware 14.0 / 14.1 / 14.2 / current : ppp (SSA:2020-064-01)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2020-286.NASL
description	This update for ppp fixes the following security issue : - CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610). This update was imported from the SUSE:SLE-15:Update update project.
last seen	2020-03-18
modified	2020-03-06
plugin id	134279
published	2020-03-06
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134279
title	openSUSE Security Update : ppp (openSUSE-2020-286)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2020-0489-1.NASL
description	This update for ppp fixes the following security issue : CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-03-18
modified	2020-02-27
plugin id	134101
published	2020-02-27
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134101
title	SUSE SLED15 / SLES15 Security Update : ppp (SUSE-SU-2020:0489-1)

NASL family	CentOS Local Security Checks
NASL id	CENTOS_RHSA-2020-0630.NASL
description	An update for ppp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-17
modified	2020-02-28
plugin id	134121
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134121
title	CentOS 7 : ppp (CESA-2020:0630)

NASL family	Oracle Linux Local Security Checks
NASL id	ORACLELINUX_ELSA-2020-0630.NASL
description	From Red Hat Security Advisory 2020:0630 : An update for ppp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-18
modified	2020-02-28
plugin id	134141
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134141
title	Oracle Linux 7 : ppp (ELSA-2020-0630)

NASL family	CentOS Local Security Checks
NASL id	CENTOS_RHSA-2020-0631.NASL
description	An update for ppp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-17
modified	2020-02-28
plugin id	134122
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134122
title	CentOS 6 : ppp (CESA-2020:0631)

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-4288-1.NASL
description	It was discovered that ppp incorrectly handled certain rhostname values. A remote attacker could use this issue to cause ppp to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-03-18
modified	2020-02-24
plugin id	133950
published	2020-02-24
reporter	Ubuntu Security Notice (C) 2020 Canonical, Inc. / NASL script (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133950
title	Ubuntu 16.04 LTS / 18.04 LTS / 19.10 : ppp vulnerability (USN-4288-1)

NASL family	Scientific Linux Local Security Checks
NASL id	SL_20200227_PPP_ON_SL6_X.NASL
description	Security Fix(es) : - ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)
last seen	2020-03-18
modified	2020-02-28
plugin id	134150
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134150
title	Scientific Linux Security Update : ppp on SL6.x i386/x86_64 (20200227)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2020-0490-1.NASL
description	This update for ppp fixes the following security issue : CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-03-18
modified	2020-02-27
plugin id	134102
published	2020-02-27
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134102
title	SUSE SLED12 / SLES12 Security Update : ppp (SUSE-SU-2020:0490-1)

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DLA-2097.NASL
description	Ilja Van Sprundel discovered a buffer overflow vulnerability in ppp, the Point-to-Point Protocol daemon. When receiving an EAP Request message in client mode, an attacker was able to overflow the rhostname array by providing a very long name. This issue is also mitigated by Debian
last seen	2020-03-17
modified	2020-02-10
plugin id	133561
published	2020-02-10
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/133561
title	Debian DLA-2097-1 : ppp security update

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2020-1319.NASL
description	According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.(CVE-2020-8597) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-05-06
modified	2020-03-23
plugin id	134810
published	2020-03-23
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134810
title	EulerOS 2.0 SP5 : ppp (EulerOS-SA-2020-1319)

NASL family	Oracle Linux Local Security Checks
NASL id	ORACLELINUX_ELSA-2020-0633.NASL
description	From Red Hat Security Advisory 2020:0633 : An update for ppp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-18
modified	2020-03-02
plugin id	134191
published	2020-03-02
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134191
title	Oracle Linux 8 : ppp (ELSA-2020-0633)

NASL family	Oracle Linux Local Security Checks
NASL id	ORACLELINUX_ELSA-2020-0631.NASL
description	From Red Hat Security Advisory 2020:0631 : An update for ppp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-18
modified	2020-02-28
plugin id	134142
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134142
title	Oracle Linux 6 : ppp (ELSA-2020-0631)

NASL family	Amazon Linux Local Security Checks
NASL id	AL2_ALAS-2020-1400.NASL
description	eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. (CVE-2020-8597)
last seen	2020-03-17
modified	2020-03-09
plugin id	134328
published	2020-03-09
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134328
title	Amazon Linux 2 : ppp (ALAS-2020-1400)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2020-0630.NASL
description	An update for ppp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-18
modified	2020-02-28
plugin id	134144
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134144
title	RHEL 7 : ppp (RHSA-2020:0630)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2020-0634.NASL
description	An update for ppp is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es) : * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-18
modified	2020-02-28
plugin id	134148
published	2020-02-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134148
title	RHEL 8 : ppp (RHSA-2020:0634)

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2020-571091C70B.NASL
description	This is an update fixing CVE-2020-8597. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-03-18
modified	2020-03-09
plugin id	134333
published	2020-03-09
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134333
title	Fedora 30 : ppp (2020-571091c70b)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-202003-19.NASL
description	The remote host is affected by the vulnerability described in GLSA-202003-19 (PPP: Buffer overflow) It was discovered that bounds check in PPP for the rhostname was improperly constructed in the EAP request and response functions. Impact : A remote attacker, by sending specially crafted authentication data, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition. Workaround : There is no known workaround at this time.
last seen	2020-03-19
modified	2020-03-16
plugin id	134596
published	2020-03-16
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134596
title	GLSA-202003-19 : PPP: Buffer overflow

Packetstorm

data source	https://packetstormsecurity.com/files/download/156802/CVE-2020-8597.py.txt
id	PACKETSTORM:156802
last seen	2020-03-20
published	2020-03-18
reporter	nu11secur1ty
source	https://packetstormsecurity.com/files/156802/pppd-2.4.8-Buffer-Overflow.html
title	pppd 2.4.8 Buffer Overflow

Redhat

advisories

bugzilla

id	1800727
title	CVE-2020-8597 ppp: Buffer overflow in the eap_request and eap_response functions in eap.c

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND
comment ppp-devel is earlier than 0:2.4.5-34.el7_7
oval oval:com.redhat.rhsa:tst:20200630001
comment ppp-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20200630002
AND
comment ppp is earlier than 0:2.4.5-34.el7_7
oval oval:com.redhat.rhsa:tst:20200630003
comment ppp is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20200630004

rhsa

id	RHSA-2020:0630
released	2020-02-27
severity	Important
title	RHSA-2020:0630: ppp security update (Important)

bugzilla

id	1800727
title	CVE-2020-8597 ppp: Buffer overflow in the eap_request and eap_response functions in eap.c

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 6 is installed
oval oval:com.redhat.rhba:tst:20111656003

AND
comment ppp is earlier than 0:2.4.5-11.el6_10
oval oval:com.redhat.rhsa:tst:20200631001
comment ppp is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20200630004
AND
comment ppp-devel is earlier than 0:2.4.5-11.el6_10
oval oval:com.redhat.rhsa:tst:20200631003
comment ppp-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20200630002

rhsa

id	RHSA-2020:0631
released	2020-02-27
severity	Important
title	RHSA-2020:0631: ppp security update (Important)

bugzilla

id	1800727
title	CVE-2020-8597 ppp: Buffer overflow in the eap_request and eap_response functions in eap.c

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 8 is installed
oval oval:com.redhat.rhba:tst:20193384074

AND

comment ppp-debugsource is earlier than 0:2.4.7-26.el8_1
oval oval:com.redhat.rhsa:tst:20200633001
comment ppp-debugsource is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20200633002

AND

comment network-scripts-ppp is earlier than 0:2.4.7-26.el8_1
oval oval:com.redhat.rhsa:tst:20200633003
comment network-scripts-ppp is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20200633004

AND
comment ppp-devel is earlier than 0:2.4.7-26.el8_1
oval oval:com.redhat.rhsa:tst:20200633005
comment ppp-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20200630002
AND
comment ppp is earlier than 0:2.4.7-26.el8_1
oval oval:com.redhat.rhsa:tst:20200633007
comment ppp is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20200630004

rhsa

id	RHSA-2020:0633
released	2020-02-27
severity	Important
title	RHSA-2020:0633: ppp security update (Important)

rhsa
id RHSA-2020:0634

rpms

ppp-0:2.4.5-34.el7_7
ppp-debuginfo-0:2.4.5-34.el7_7
ppp-devel-0:2.4.5-34.el7_7
ppp-0:2.4.5-11.el6_10
ppp-debuginfo-0:2.4.5-11.el6_10
ppp-devel-0:2.4.5-11.el6_10
network-scripts-ppp-0:2.4.7-26.el8_1
ppp-0:2.4.7-26.el8_1
ppp-debuginfo-0:2.4.7-26.el8_1
ppp-debugsource-0:2.4.7-26.el8_1
ppp-devel-0:2.4.7-26.el8_1
network-scripts-ppp-0:2.4.7-26.el8_0
ppp-0:2.4.7-26.el8_0
ppp-debuginfo-0:2.4.7-26.el8_0
ppp-debugsource-0:2.4.7-26.el8_0

The Hacker News

id	THN:BB51ABA4A4D1478690F5C155F8B9597A
last seen	2020-03-06
modified	2020-03-06
published	2020-03-05
reporter	The Hacker News
source	https://thehackernews.com/2020/03/ppp-daemon-vulnerability.html
title	Critical PPP Daemon Flaw Opens Most Linux Systems to Remote Hackers

Part	Description	Count
Application	Point-To-Point_Protocol_Project Point TO Point Protocol Project Point TO Point Protocol 2.4.2 Point TO Point Protocol Project Point TO Point Protocol 2.4.3 Point TO Point Protocol Project Point TO Point Protocol 2.4.4 Point TO Point Protocol Project Point TO Point Protocol 2.4.5 Point TO Point Protocol Project Point TO Point Protocol 2.4.6 Point TO Point Protocol Project Point TO Point Protocol 2.4.7 Point TO Point Protocol Project Point TO Point Protocol 2.4.8	7
OS	Wago Wago PFC Firmware 03.00.35\(12\) Wago PFC Firmware 03.00.39\(12.1\) Wago PFC Firmware 03.03.10\(15\) Wago PFC Firmware 03.03.11\(15.1\) Wago PFC Firmware 03.04.04\(14\)	5
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2
OS	Canonical Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04	5
Hardware	Wago Wago Pfc100 - Wago Pfc200 -	2

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

Packetstorm

Redhat

The Hacker News

Related news

References