CVE-2026-58097 in ppp
Tóm tắt
Bởi MITRE • 26/08/2026
mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface.
A local user with access to the ppp(8) command interface can crash ppp(8) or potentially execute arbitrary code as root.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.