Bug 708192

Summary:	net-dialup/ppp: rhostname buffer overflow in pppd (CVE-2020-8597)
Product:	Gentoo Security	Reporter:	filip ambroz <filip.ambroz>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	minor	CC:	base-system, polynomial-c
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/paulusmack/ppp/commit/8d7970b8f3db727fe798b65f3377fe6787575426
Whiteboard:	A4? [upstream/ebuild]
Package list:		Runtime testing required:	---

Description filip ambroz 2020-02-04 09:10:23 UTC

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions

Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev

2020-02-20 16:21:54 UTC


*** This bug has been marked as a duplicate of bug 710308 ***