Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hx7c-3c6c-mhm3

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the refuse-app option are unaffected.

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the refuse-app option are unaffected.

EPSS

Процентиль: 61%
0.00406
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-190
CWE-20

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 7 лет назад

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the `refuse-app` option are unaffected.

CVSS3: 7.5
redhat
больше 7 лет назад

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the `refuse-app` option are unaffected.

CVSS3: 9.8
nvd
больше 7 лет назад

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the `refuse-app` option are unaffected.

CVSS3: 9.8
debian
больше 7 лет назад

Improper input validation together with an integer overflow in the EAP ...

EPSS

Процентиль: 61%
0.00406
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-190
CWE-20