Boletines de Vulnerabilidades

DSA-4632 ppp - security update

   
Software afectado Debian
 
Ilja Van Sprundel reported a logic flaw in the Extensible AuthenticationProtocol (EAP) packet parser in the Point-to-Point Protocol Daemon(pppd). An unauthenticated attacker can take advantage of this flaw totrigger a stack-based buffer overflow, leading to denial of service(pppd daemon crash).

More info:

https://www.debian.org/security/2020/dsa-4632