eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. CREATE(Triage):(User=admin) CVE-2020-8597 (https://nvd.nist.gov/vuln/detail/CVE-2020-8597)