|Type||Arbitrary code execution|
A buffer overflow flaw was found in the ppp package in versions 2.4.2 through 2.4.8. The bounds check for the rhostname was improperly constructed in the EAP request and response functions which could allow a buffer overflow to occur. Data confidentiality and integrity, as well as system availability, are all at risk with this vulnerability.
|07 Mar 2020||ASA-202003-3||AVG-1101||ppp||Medium||arbitrary code execution|