SB2026082160 - Buffer overflow in PPPD PEAP support

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026082160

SB2026082160 - Buffer overflow in PPPD PEAP support

Published: August 21, 2026

Security Bulletin ID SB2026082160
CSH Severity
Medium
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Out-of-bounds write (CVE-ID: CVE-2026-75883)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to corrupt memory.

The vulnerability exists due to out-of-bounds write in the peap_response() code path when formatting a response to a PEAP Request packet. A remote attacker can send a PEAP authentication request that causes a TLS record to be copied into a fixed global buffer without sufficient bounds checking to corrupt memory.

The pppd process must be configured to agree to PEAP authentication, such as when the ca option or the capath option is supplied. Each pppd instance communicates with a single remote PPP peer, so a crash denies service only to that peer.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References