CVE-2020-8597

Priority
Description
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow
in the eap_request and eap_response functions.
Assigned-to
mdeslaur
Notes
Package
Source: lwip (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 20.04 LTS (Focal Fossa):needs-triage
Ubuntu 20.10 (Groovy Gorilla):not-affected (2.1.2+dfsg1-6)
Patches:
Upstream:http://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=2ee3cbe69c6d2805e64e7cac2a1c1706e49ffd86
Package
Source: ppp (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):released (2.4.5-5ubuntu1.3)
Ubuntu 14.04 ESM (Trusty Tahr):released (2.4.5-5.1ubuntu2.3+esm1)
Ubuntu 16.04 LTS (Xenial Xerus):released (2.4.7-1+2ubuntu1.16.04.2)
Ubuntu 18.04 LTS (Bionic Beaver):released (2.4.7-2+2ubuntu1.2)
Ubuntu 20.04 LTS (Focal Fossa):released (2.4.7-2+4.1ubuntu5)
Ubuntu 20.10 (Groovy Gorilla):released (2.4.7-2+4.1ubuntu5)
Patches:
Upstream:https://github.com/paulusmack/ppp/commit/8d7970b8f3db727fe798b65f3377fe6787575426
More Information

Updated: 2020-09-09 23:37:11 UTC (commit 81a23a978c4436cd99e1d040e9e73e9146876281)