CVE-2020-8597

—

CVSS 3.1

9.8 critical

EPSS

20%p97

Published

Feb 3, 2020 (Feb 3, 2020)

Modified

Jun 17, 2026

Description

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

Vendors: point-to-point protocol project wago debian canonical
Products: point-to-point protocol, pfc firmware, debian linux, ubuntu linux
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (19.9%)

In the news5 stories

Week in review: Trojanized hacking tools, coronavirus scams, (IN)SECURE Magazine special issue

Help Net SecurityMar 15, 00:00 UTC · Mar 15, 2020Malware CVE-2020-8597 CVE-2020-0796 CVE-2020-10189

60

Critical PPP Daemon Flaw Opens Most Linux Systems to Remote Hackers

The Hacker NewsMar 6, 14:17 UTC · Mar 6, 2020Exploit / PoC in the wildCVE-2020-8597

60

Most of Linux distros affected by a critical RCE in PPP Daemon flaw

Security AffairsMar 6, 09:08 UTC · Mar 6, 2020Vulnerability CVE-2020-8597

60

PPP Daemon flaw opens Linux distros, networking devices to takeover attacks

Help Net SecurityMar 10, 00:00 UTC · Mar 10, 2020Exploit / PoC CVE-2020-8597

50

Millions of routers running OpenWRT vulnerable to attack

Help Net SecurityApr 1, 00:00 UTC · Apr 1, 2020Vulnerability CVE-2020-7982 CVE-2020-8597

47