Buffer overflow in PPP - CVE-2020-8597

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU24916

Buffer overflow in PPP - CVE-2020-8597

Published: February 4, 2020 / Updated: January 25, 2021


Vulnerability identifier: #VU24916
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-8597
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the "eap_request" and "eap_response" functions in "eap.c" file in pppd. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

PPP
RUGGEDCOM RM1224
Arch Linux
Gentoo Linux
Amazon Linux AMI
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
CentOS
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Slackware Linux
Opensuse
Fedora
Wyse ThinLinux
SCALANCE M-800 / S615
ppp (Debian package)
ppp (Alpine package)
ppp (Ubuntu package)
ppp (Red Hat package)
ppp
Data Computing Appliance (DCA)
Dell EMC Unity Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)

How to mitigate CVE-2020-8597

Install update from vendor's website.

PPP - update to 2.4.9
RUGGEDCOM RM1224 - update to 6.3
SCALANCE M-800 / S615 - update to 6.3
ppp (Debian package) - addressed in versions 2.4.7-1+4+deb9u1, 2.4.7-2+4.1+deb10u1
ppp (Alpine package) - addressed in versions 2.4.7-r6, 2.4.7-r7
ppp (Ubuntu package) - addressed in versions 2.4.5-5ubuntu1.3, 2.4.5-5.1ubuntu2.3+esm1, 2.4.7-1+2ubuntu1.16.04.2, 2.4.7-2+2ubuntu1.2, 2.4.7-2+4.1ubuntu4.1
Data Computing Appliance (DCA) - update to 3.5.5.0
Wyse ThinLinux - update to 2.2.1.01
ppp (Red Hat package) - addressed in versions 2.4.5-11.el6_10, 2.4.5-34.el7_7, 2.4.7-26.el8_0, 2.4.7-26.el8_1
ppp - addressed in versions 2.4.7-34.fc30, 2.4.7-34.fc31
Dell EMC Unity Operating Environment (OE) - update to 5.0.3.0.5.014
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.3.0.5.014

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins