← Database

CVE-2026-58097

HIGH CVSS: 7.8 Published: 2026-08-26 Modified: 2026-08-27

Description

mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user with access to the ppp(8) command interface can crash ppp(8) or potentially execute arbitrary code as root.

Affected Platforms

Unknown

Weakness Type

CWE-122, CWE-130

References