CVE-2018-11574 — n/a / n/a

Description (CNA)

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the `refuse-app` option are unaffected.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://usn.ubuntu.com/3810-1/
http://www.openwall.com/lists/oss-security/2018/06/11/1

ADP enrichment

CVE

No English description supplied.

https://usn.ubuntu.com/3810-1/
http://www.openwall.com/lists/oss-security/2018/06/11/1

CISA-ADP

No English description supplied.

No references supplied.