CVE-2020-8597: canonical ubuntu_linux Classic Buffer Overflow

CVSS: 9.8v3.1CriticalModified

AliasesALPINE-CVE-2020-8597MGASA-2020-0139SUSE-SU-2020:0489-1+14 more

Published 03-02-2020Last modified 03-12-2025

Vulnerability summary

CVE-2020-8597 is a critical (CVSS 9.8) Classic Buffer Overflow vulnerability in canonical ubuntu_linux. EPSS estimates a 19.93% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (CVE.org)

EPSS score

19.93%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 1

USN-8423-1

Timeline

03-02-2020
PublishedVulnerability first disclosed.
03-12-2025
Last modifiedVulnerability information updated.

Description

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

CVSS metrics

7 scores · 6 sources · 2 versions

v3.19.8v2.07.5

EPSS trend

Probability

19.93%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 19.93% on 21-09-2026

21-09-202621-10-2026

EPSS score

19.93%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Affected systems

Suse24 products

ppp&distro=HPE Helion OpenStack 8< 2.4.7-4.3.1
ppp&distro=SUSE Enterprise Storage 5< 2.4.7-4.3.1
ppp&distro=SUSE Linux Enterprise Desktop 12 SP4< 2.4.7-4.3.1
ppp&distro=SUSE Linux Enterprise Module for Desktop Applications 15< 2.4.7-5.3.1
ppp&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1< 2.4.7-5.3.1

Show all 24

Redhat5 products

network-scripts-ppp< 0:2.4.7-26.el8_1
ppp< 0:2.4.5-34.el7_7 | < 0:2.4.5-11.el6_10 | < 0:2.4.7-26.el8_1 | < 0:2.4.7-26.el8_0
ppp-debuginfo< 0:2.4.5-34.el7_7 | < 0:2.4.5-11.el6_10 | < 0:2.4.7-26.el8_1 | < 0:2.4.7-26.el8_0
ppp-debugsource< 0:2.4.7-26.el8_1 | < 0:2.4.7-26.el8_0
ppp-devel< 0:2.4.5-34.el7_7 | < 0:2.4.5-11.el6_10 | < 0:2.4.7-26.el8_1

Debian3 products

lwip< 2.1.2+dfsg1-5
ppp< 2.4.8-1+1 | < 2.4.7-1+4+deb9u1 | < 2.4.7-2+4.1+deb10u1 | < 2.4.6-3.1+deb8u1
debian_linuxEOL9.0 | 10.0

Opensuse2 products

ppp&distro=openSUSE Leap 15.1< 2.4.7-lp151.5.3.1
ppp&distro=openSUSE Tumbleweed< 2.4.8-3.6

Ubuntu2 products

lwip< 2.1.2+dfsg1-4ubuntu0.1~esm1
ppp< 2.4.7-2+4.1ubuntu5 | < 2.4.7-1+2ubuntu1.16.04.2 | < 2.4.7-2+2ubuntu1.2 | < 2.4.5-5.1ubuntu2.3+esm1

Alpine1 product

ppp< 2.4.7-r7 | < 2.4.8-r1

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 16.04 | 18.04 | 19.04

Mageia1 product

ppp< 2.4.7-13.1.mga7

Point-to-point_protocol_project1 product

point-to-point_protocol≥ 2.4.2, ≤ 2.4.8

Wago1 product

pfc_firmware< 03.04.10\(16\)

10 vendors · 41 products

References

46 links

github.com/paulusmack/ppp/commit/8d7970b8f3db727fe798b65f3377fe6787575426X Refsource MISCPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2020/02/msg00005.htmlMailing ListX Refsource MLISTThird Party Advisory
www.debian.org/security/2020/dsa-4632Vendor AdvisoryX Refsource DEBIANThird Party Advisory
access.redhat.com/errata/RHSA-2020:0631Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2020:0634Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2020:0633Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2020:0630Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2020-03/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
usn.ubuntu.com/4288-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.kb.cert.org/vuls/id/782301Third Party AdvisoryX Refsource CERT VNUS Government Resource

Show all 46 references

seclists.org/fulldisclosure/2020/Mar/6Mailing ListX Refsource FULLDISCThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
packetstormsecurity.com/files/156662/pppd-2.4.8-Buffer-Overflow.htmlX Refsource MISCThird Party AdvisoryVDB Entry
www.synology.com/security/advisory/Synology_SA_20_02X Refsource CONFIRMThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
security.netapp.com/advisory/ntap-20200313-0004/X Refsource CONFIRMThird Party Advisory
security.gentoo.org/glsa/202003-19Vendor AdvisoryX Refsource GENTOOThird Party Advisory
usn.ubuntu.com/4288-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
packetstormsecurity.com/files/156802/pppd-2.4.8-Buffer-Overflow.htmlX Refsource MISCThird Party AdvisoryVDB Entry
kb.netgear.com/000061806/…X Refsource CONFIRMThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-809841.pdfX Refsource MISCThird Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-20-224-04X Refsource MISCThird Party AdvisoryUS Government Resource
security.alpinelinux.org/vuln/CVE-2020-8597Advisory
advisories.mageia.org/MGASA-2020-0139.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=26217REPORT
www.debian.org/lts/security/2020/dla-2097WEB
www.suse.com/support/update/announcement/2020/suse-su-20200489-1/Advisory
bugzilla.suse.com/1162610REPORT
www.suse.com/security/cve/CVE-2020-8597WEB
www.suse.com/support/update/announcement/2020/suse-su-20200490-1/Advisory
www.suse.com/support/update/announcement/2020/suse-su-202014292-1/Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1800727REPORT
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0630.jsonAdvisory
access.redhat.com/security/cve/CVE-2020-8597REPORT
www.cve.org/CVERecord?id=CVE-2020-8597AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2020-8597AdvisoryOval
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0631.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0633.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0634.jsonAdvisory
ubuntu.com/security/CVE-2020-8597REPORT
ubuntu.com/security/notices/USN-4288-1Advisory
ubuntu.com/security/notices/USN-4288-2Advisory
ubuntu.com/security/notices/USN-8423-1Advisory
security-tracker.debian.org/tracker/CVE-2020-8597Advisory
lists.opensuse.org/archives/…Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities