Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: FreeBSD — security.freebsd.org/advisories/FreeBSD-SA-26:60.ppp.asc Clear all filters
TI-2026-41847 CVE-2026-58097 · GHSA-8qxx-j2rw-6vhr

ppp(8): missing length validation in mp_SetEnddisc()

Priority LOW 35

mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00166 Published 2026-08-26 Fixed in p3, p13 +1 CWE-122
TI-2026-41846 CVE-2026-58096 · GHSA-92ww-f582-cp72

ppp(8): missing length validation in LcpDecodeConfig()

Priority MEDIUM 41

LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00604 Published 2026-08-26 Fixed in p3, p13 +1 CWE-130
TI-2026-41845 CVE-2026-58095

ppp(8): incorrect length calculation in mp_Enddisc()

Priority MEDIUM 41

mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00604 Published 2026-08-26 Fixed in p3, p13 +1 CWE-122