Point-to-Point Protocol Daemon Vulnerable to Buffer Overflow (CVE-2020-8597)

Recently, the CERT Coordination Center (CERT/CC) published a vulnerability note, VU#782301 for a critical vulnerability in the Point-to-Point Protocol Daemon (pppd) used by a variety of Linux distributions and other products.

The flaw, identified as CVE-2020-8597, is a buffer overflow vulnerability in pppd due to a logic flaw in several functions of the Extensible Authentication Protocol (EAP) packet processor.

For more information about this vulnerability, please visit our blog.