CVE:CVE-2020-8597
CNNVD:CNNVD-202002-029
ppp是Paul PPP Package开源的一个实现点对点协议（ppp）的库。
ppp 2.4.2版本至2.4.8版本中的pppd的‘eap_request’和‘eap_response ’函数存在缓冲区错误漏洞，该漏洞源于程序没有正确检查边界。远程攻击者可借助特制EAP数据包利用该漏洞在系统上执行任意代码，或导致内存损坏。
solution:Upgrade point-to-point_protocol_project point-to-point_protocol to a higher version than 2.4.8,and avoid the version [2.4.2,2.4.8]; Upgrade wago pfc_firmware to a higher version than 03.04.10\(16\,and avoid the version (,03.04.10\(16\)); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.04,and avoid the version 12.04,14.04,16.04,18.04,19.04