pppd vulnerable to buffer overflow (EAP packet processing)

Category : Alert | Sub Category : Notification Posted on 2020-03-05 21:45:59

---

pppd vulnerable to buffer overflow due to a flaw in EAP packet processing

CWE-120 Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

It is incorrect to assume that pppd is not vulnerable if EAP is not enabled or EAP has not been negotiated by a remote peer using a secret or passphrase.

Go!