CRITICAL 9.8 NVD

CVE-2026-58096

LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would tri

LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp(8) or potentially execute arbitrary code as root.

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:60.ppp.asc

Published: 2026-08-26 · Source: NVD · Feed updated: 2026-08-26

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-08-26 via NVD.

Risk Timeline

CVE Disclosed2026-08-26 · -1 days ago

Remediation Resources

Official Advisory

security.freebsd.org/advisories/FreeBSD-SA-26:60.ppp.asc

vulnfeed aggregates 11364 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.