{"vulnerability": "cve-2020-8597", "sightings": [{"uuid": "1a8de33c-b0f2-4dd5-8fa8-a0f2c1f9b392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8597", "type": "published-proof-of-concept", "source": "Telegram/yS_-1Ku4vwDylMmbvYhhr413q-GTLB94cWzytzORvOuOFtoh", "content": "", "creation_timestamp": "2021-01-16T21:18:00.000000Z"}, {"uuid": "7fe55ce3-67c5-4990-8454-d6f29d321591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8597", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/744", "content": "#exploit\n1. CVE-2020-9054: \nZyXEL NAS pre-authentication command injection in weblogin.cgi\nhttps://www.kb.cert.org/vuls/id/498544\n]-> Firmware updates:\nhttps://www.zyxel.com/support/remote-code-execution-vulnerability-of-NAS-products.shtml\n\n2. CVE-2020-8597:\nBoF in Pppd ver. 2.4.2 - 2.4.8 are vulnerable to buffer overflow due to a flaw in Extensible Authentication Protocol packet processing in eap_request and eap_response subroutines\nhttps://www.kb.cert.org/vuls/id/782301\nhttps://github.com/marcinguy/CVE-2020-8597\n]-> Patch: https://github.com/paulusmack/ppp", "creation_timestamp": "2024-10-17T02:21:33.000000Z"}, {"uuid": "b399ce86-1f54-4b98-b854-3504f6960da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8597", "type": "seen", "source": "https://t.me/linux_news/622", "content": "#ALERTS\nLinux Security Advisory\n\nSeveral Linux distributions have released security updates to address vulnerabilities in their respective operating systems. Of note is a vulnerability in the Point-to-Point Protocol Daemon (pppd) versions 2.4.2 through 2.4.8.  \n\nDue to a flaw in the Extensible Authentication Protocol (EAP) packet processing in the Point-to-Point Protocol Daemon (pppd), an unauthenticated remote actor may be able to cause a stack buffer overflow, allowing for arbitrary code execution on the target system.\n\nLinux operating systems affected by this vulnerability include Debian, Ubuntu, Red Hat, and Suse. Please note that this is not an exhaustive list and that other versions of Linux may be affected. Several security bulletins have been released and the Cyber Centre encourages users and administrators to review the applicable bulletins listed below and apply the necessary updates.\n\nDebian: https://security-tracker.debian.org/tracker/CVE-2020-8597\nUbuntu: https://usn.ubuntu.com/4288-1/\nRed Hat: https://access.redhat.com/errata/RHSA-2020:0630\nSuse: https://www.suse.com/security/cve/CVE-2020-8597/\n\n\ud83d\udc27 https://t.me/linux_news", "creation_timestamp": "2026-07-29T12:03:23.752017Z"}]}