Описание
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| lwip | fixed | 2.1.2+dfsg1-5 | package | |
| lwip | fixed | 2.0.3-3+deb10u1 | buster | package |
| ppp | fixed | 2.4.8-1+1 | package |
Примечания
http://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=2ee3cbe69c6d2805e64e7cac2a1c1706e49ffd86
https://github.com/paulusmack/ppp/commit/8d7970b8f3db727fe798b65f3377fe6787575426
EPSS
Процентиль: 98%
0.60175
Средний
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 5 лет назад
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
CVSS3: 9.8
redhat
больше 5 лет назад
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
CVSS3: 9.8
nvd
больше 5 лет назад
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
EPSS
Процентиль: 98%
0.60175
Средний