CVE-2026-58096
Received Received - Intake

Out-of-Bounds Write in ppp(8) via Undersized Endpoint Discriminator

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: FreeBSD

Description
LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp(8) or potentially execute arbitrary code as root.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-58096
EUVD
EUVD-2026-66247

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-130 The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves LcpDecodeConfig() failing to validate the length of endpoint discriminator options in PPP packets. Undersized options cause an out-of-bounds write, potentially allowing a malicious PPP peer to crash the system or execute arbitrary code with root privileges.

Impact Analysis

An attacker could exploit this to crash your system or gain root access, leading to complete system compromise. This could result in data theft, unauthorized system changes, or denial of service.

Mitigation Strategies

Update the ppp(8) software to the latest patched version to address the out-of-bounds write vulnerability in LcpDecodeConfig().

Disable PPP services if not in use to prevent potential exploitation by malicious peers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58096. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart