{"id":"CVE-2020-8597","aliases":["ALPINE-CVE-2020-8597","ALSA-2020:0633","AZL-45009","BELL-CVE-2020-8597","DEBIAN-CVE-2020-8597","DLA-2097-1","DSA-4632-1","EUVD-2020-29445","GHSA-gw8r-xfqw-vw42","MGASA-2020-0139","RHSA-2020:0630","RHSA-2020:0631","RHSA-2020:0633","RHSA-2020:0634","RLSA-2020:0633","SUSE-SU-2020:0489-1","SUSE-SU-2020:0490-1","SUSE-SU-2020:14292-1","UBUNTU-CVE-2020-8597","USN-4288-1","USN-4288-2","openSUSE-SU-2020:0286-1","openSUSE-SU-2024:11191-1"],"status":"published","title":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and...","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.19925,"percentile":0.97451,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-120"],"published":"2020-02-03T22:58:21Z","modified":"2026-10-29T11:00:06Z","exploits":[{"source":"pocgithub","id":"dointisme/CVE-2020-8597","title":"dointisme/CVE-2020-8597","date":"2020-03-06","url":"https://github.com/dointisme/CVE-2020-8597"},{"source":"pocgithub","id":"winmin/CVE-2020-8597","title":"winmin/CVE-2020-8597","date":"2020-03-07","url":"https://github.com/winmin/CVE-2020-8597"},{"source":"pocgithub","id":"Dilan-Diaz/Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-","title":"Dilan-Diaz/Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-","date":"2020-05-12","url":"https://github.com/Dilan-Diaz/Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-"},{"source":"pocgithub","id":"lakwsh/CVE-2020-8597","title":"lakwsh/CVE-2020-8597","date":"2021-01-24","url":"https://github.com/lakwsh/CVE-2020-8597"},{"source":"pocgithub","id":"anna-kravets/codeql-buffer-overflow-variant","title":"anna-kravets/codeql-buffer-overflow-variant","date":"2026-08-12","url":"https://github.com/anna-kravets/codeql-buffer-overflow-variant"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"ppp","fixed_in":["2.4.7-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"ppp","fixed_in":["2.4.7-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ppp","fixed_in":["2.4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"ppp","fixed_in":["2.4.7-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"ppp","fixed_in":["2.4.7-r7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ppp","fixed_in":["2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ppp-devel","fixed_in":["2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ppp","fixed_in":["2.4.7-36"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"lwip","fixed_in":["2.1.2+dfsg1-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lwip","fixed_in":["2.1.2+dfsg1-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lwip","fixed_in":["2.1.2+dfsg1-5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ppp","fixed_in":["2.4.8-1+1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ppp","fixed_in":["2.4.8-1+1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ppp","fixed_in":["2.4.8-1+1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"ppp","fixed_in":["2.4.6-3.1+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"ppp","fixed_in":["2.4.7-1+4+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"ppp","fixed_in":["2.4.7-2+4.1+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"ppp","fixed_in":["2.4.7-13.1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ppp","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ppp-debuginfo","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ppp-devel","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ppp","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ppp-debuginfo","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ppp-devel","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ppp","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ppp-debuginfo","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ppp-devel","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ppp","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ppp-debuginfo","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ppp-devel","fixed_in":["0:2.4.5-34.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ppp","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ppp-debuginfo","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ppp-devel","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ppp","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ppp-debuginfo","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ppp-devel","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ppp","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ppp-debuginfo","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ppp-devel","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ppp","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ppp-debuginfo","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ppp-devel","fixed_in":["0:2.4.5-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"network-scripts-ppp","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ppp-debuginfo","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ppp-debugsource","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ppp","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ppp-debuginfo","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ppp-debugsource","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ppp","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ppp-debuginfo","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ppp-debugsource","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ppp-devel","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"ppp","fixed_in":["0:2.4.7-26.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"ppp-debuginfo","fixed_in":["0:2.4.7-26.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"ppp-debugsource","fixed_in":["0:2.4.7-26.el8_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"ppp","fixed_in":["0:2.4.7-26.el8_1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"ppp","fixed_in":["2.4.7-5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ppp","fixed_in":["2.4.7-5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"ppp","fixed_in":["2.4.7-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"ppp","fixed_in":["2.4.5.git-2.32.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"ppp","fixed_in":["2.4.5.git-2.32.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ppp","fixed_in":["2.4.5-5.1ubuntu2.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ppp","fixed_in":["2.4.7-1+2ubuntu1.16.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ppp","fixed_in":["2.4.7-2+2ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ppp","fixed_in":["2.4.7-2+4.1ubuntu5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"lwip","fixed_in":["2.1.2+dfsg1-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"ppp","fixed_in":["2.4.7-lp151.5.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ppp","fixed_in":["2.4.8-3.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-r7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-36"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"lwip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2+dfsg1-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lwip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2+dfsg1-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lwip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2+dfsg1-5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-1+1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-1+1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-1+1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.6-3.1+deb8u1"}]}],"versions":["2.4.6-3.1"]},{"source":"osv","ecosystem":"Debian:9","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1+4+deb9u1"}]}],"versions":["2.4.7-1+4"]},{"source":"osv","ecosystem":"Debian:10","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-2+4.1+deb10u1"}]}],"versions":["2.4.7-2+4.1"]},{"source":"osv","ecosystem":"Mageia:7","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-13.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-34.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"network-scripts-ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ppp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ppp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ppp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ppp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"ppp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"ppp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-26.el8_1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5.git-2.32.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5.git-2.32.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-5.1ubuntu2.3+esm1"}]}],"versions":["2.4.5-5.1ubuntu2","2.4.5-5.1ubuntu2.1","2.4.5-5.1ubuntu2.2","2.4.5-5.1ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1+2ubuntu1.16.04.2"}]}],"versions":["2.4.6-3.1ubuntu1","2.4.7-1+1ubuntu1","2.4.7-1+2ubuntu1","2.4.7-1+2ubuntu1.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-2+2ubuntu1.2"}]}],"versions":["2.4.7-1+2ubuntu1","2.4.7-1+4ubuntu1","2.4.7-1+4ubuntu3","2.4.7-2+1ubuntu1","2.4.7-2+2ubuntu1","2.4.7-2+2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-2+4.1ubuntu5"}]}],"versions":["2.4.7-2+4.1ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"lwip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2+dfsg1-4ubuntu0.1~esm1"}]}],"versions":["2.1.2-3","2.1.2-5.1","2.1.2+dfsg1-1","2.1.2+dfsg1-4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1+2ubuntu1.16.04.2"}]}],"versions":["2.4.6-3.1ubuntu1","2.4.7-1+1ubuntu1","2.4.7-1+2ubuntu1","2.4.7-1+2ubuntu1.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-2+2ubuntu1.2"}]}],"versions":["2.4.7-1+2ubuntu1","2.4.7-1+4ubuntu1","2.4.7-1+4ubuntu3","2.4.7-2+1ubuntu1","2.4.7-2+2ubuntu1","2.4.7-2+2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-5.1ubuntu2.3+esm1"}]}],"versions":["2.4.5-5.1ubuntu2","2.4.5-5.1ubuntu2.1","2.4.5-5.1ubuntu2.2","2.4.5-5.1ubuntu2.3"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-lp151.5.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-3.6"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"point-to-point_protocol_project","product":"point-to-point_protocol"},{"vendor":"wago","product":"pfc_firmware"}],"references":[{"url":"https://github.com/paulusmack/ppp/commit/8d7970b8f3db727fe798b65f3377fe6787575426","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4632","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0631","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0634","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0633","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0630","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4288-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.kb.cert.org/vuls/id/782301","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"http://seclists.org/fulldisclosure/2020/Mar/6","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNJNHWOO4XF73M2W56ILZUY4JQG3JXIR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://packetstormsecurity.com/files/156662/pppd-2.4.8-Buffer-Overflow.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_20_02","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOFDAIOWSWPG732ASYUZNINMXDHY4APE/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20200313-0004/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-19","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4288-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/156802/pppd-2.4.8-Buffer-Overflow.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://kb.netgear.com/000061806/Security-Advisory-for-Unauthenticated-Remote-Buffer-Overflow-Attack-in-PPPD-on-WAC510-PSV-2020-0136","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-809841.pdf","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-224-04","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8597","tags":["web","advisory"]},{"url":"https://usn.ubuntu.com/4288-2"},{"url":"https://usn.ubuntu.com/4288-1"},{"url":"https://security.netapp.com/advisory/ntap-20200313-0004"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YOFDAIOWSWPG732ASYUZNINMXDHY4APE"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UNJNHWOO4XF73M2W56ILZUY4JQG3JXIR"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOFDAIOWSWPG732ASYUZNINMXDHY4APE"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNJNHWOO4XF73M2W56ILZUY4JQG3JXIR"},{"url":"https://github.com/advisories/GHSA-gw8r-xfqw-vw42"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-8597","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-0633.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-8597","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-8597","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-8597","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0139.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26217","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2097","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1800727","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0630.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8597","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0631.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0633.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0634.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:0633","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200489-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1162610","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8597","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200490-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014292-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-8597","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4288-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4288-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8423-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IXJEFTCYMG4AFN6TH2WV44JAKZ2VVI3I/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-8597","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","status":"published","published":"2020-02-03T22:58:21Z","modified":"2025-12-03T15:15:50.472Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:50.545879Z"}],"euvd":[{"id":"EUVD-2020-29445","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","status":"published","published":"2020-02-03T22:58:21Z","modified":"2025-12-03T15:15:50Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:10.716009Z"}],"ghsa":[{"id":"GHSA-gw8r-xfqw-vw42","title":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and...","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","status":"published","published":"2022-05-24T17:08:01Z","modified":"2025-12-03T18:31:27Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:05:01.323335Z"}],"nvd":[{"id":"CVE-2020-8597","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","status":"published","published":"2020-02-03T23:15:11.387Z","modified":"2026-06-17T03:26:36.96Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:05:53.837808Z"}],"osv":[{"id":"ALPINE-CVE-2020-8597","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","status":"published","published":"2020-02-03T23:15:11.387Z","modified":"2026-10-26T11:17:55.186484696Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"AZL-45009","title":"CVE-2020-8597 affecting package ppp for versions less than 2.4.7-36","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","status":"published","published":"2020-02-03T23:15:11Z","modified":"2026-04-21T04:50:19.446365Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"BELL-CVE-2020-8597","title":"CVE-2020-8597 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:45.896749Z","modified":"2026-01-26T09:50:02.074049Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-8597","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","status":"published","published":"2020-02-03T23:15:11.387Z","modified":"2026-10-20T14:01:46.804450746Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2020-8597","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","status":"published","published":"2020-02-03T23:15:11.387Z","modified":"2026-10-26T12:02:34.264062186Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"RHSA-2020:0630","title":"Red Hat Security Advisory: ppp security update","status":"published","published":"2024-09-16T03:36:32Z","modified":"2026-06-26T10:46:21Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0631","title":"Red Hat Security Advisory: ppp security update","status":"published","published":"2024-09-16T03:36:40Z","modified":"2026-06-26T10:46:21Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0633","title":"Red Hat Security Advisory: ppp security update","status":"published","published":"2024-09-16T03:36:16Z","modified":"2026-06-26T12:22:04.597230045Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0634","title":"Red Hat Security Advisory: ppp security update","status":"published","published":"2024-09-16T03:36:24Z","modified":"2025-12-04T11:45:45.162719Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RLSA-2020:0633","title":"Important: ppp security update","description":"The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line.\n\nSecurity Fix(es):\n\n* ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-02-27T14:59:09Z","modified":"2026-02-04T11:45:10.674748Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-8597","description":"eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.","status":"published","published":"2020-02-03T23:15:00Z","modified":"2026-06-18T00:44:22.614747661Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"ALSA-2020:0633","title":"Important: ppp security update","description":"The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line.\n\nSecurity Fix(es):\n\n* ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-02-27T14:59:09Z","modified":"2026-10-29T11:00:06.804168059Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2097-1","title":"ppp - security update","status":"published","published":"2020-02-09T00:00:00Z","modified":"2026-03-09T01:20:51.414022Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4632-1","title":"ppp - security update","status":"published","published":"2020-02-22T00:00:00Z","modified":"2026-03-09T02:10:26.531403Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0139","title":"Updated ppp packages fix security vulnerability","description":"Updated ppp packages fix security vulnerability:\n\nIlja Van Sprundel discovered a buffer overflow vulnerability in ppp.\nWhen receiving an EAP Request message in client mode, an attacker was\nable to overflow the rhostname array by providing a very long name\n(CVE-2020-8597).\n","status":"published","published":"2020-03-12T21:47:01Z","modified":"2026-04-16T04:40:40.55433178Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0286-1","title":"Security update for ppp","description":"This update for ppp fixes the following security issue:\n\n- CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-03-02T15:14:31Z","modified":"2025-05-07T18:12:18.52733Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11191-1","title":"ppp-2.4.8-3.6 on GA media","description":"These are all security issues fixed in the ppp-2.4.8-3.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:05:07.890248Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:0489-1","title":"Security update for ppp","description":"This update for ppp fixes the following security issue:\n\n- CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610).\n","status":"published","published":"2020-02-26T10:44:07Z","modified":"2025-05-02T04:10:25.108165Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0490-1","title":"Security update for ppp","description":"This update for ppp fixes the following security issue:\n\n- CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610).\n","status":"published","published":"2020-02-26T10:46:29Z","modified":"2026-02-04T02:49:29.04829Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:14292-1","title":"Security update for ppp","description":"This update for ppp fixes the following security issue:\n\n- CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610).\n","status":"published","published":"2020-02-25T11:58:31Z","modified":"2026-02-04T03:21:27.644443Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4288-1","title":"ppp vulnerability","description":"It was discovered that ppp incorrectly handled certain rhostname values. A\nremote attacker could use this issue to cause ppp to crash, resulting in a\ndenial of service, or possibly execute arbitrary code.\n","status":"published","published":"2020-02-20T13:37:54Z","modified":"2026-04-27T15:34:45.130917Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4288-2","title":"ppp vulnerability","description":"USN-4288-1 fixed a vulnerability in ppp. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that ppp incorrectly handled certain rhostname values. A\n remote attacker could use this issue to cause ppp to crash, resulting in a\n denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2020-03-02T17:58:09Z","modified":"2026-04-27T15:34:29.480851Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}