Endpoint Discriminator Options Validation Flaw in FreeBSD PPP Implementation
CVE-2026-58096

8.8HIGH

Key Information:

Vendor

FreeBSD

Status
FreeBSD
Vendor
CVE Published:
26 August 2026

What is CVE-2026-58096?

A vulnerability exists in the FreeBSD PPP implementation due to the LcpDecodeConfig() function's failure to properly validate the length of received endpoint discriminator options against the requirements set forth in RFC 1717. This flaw allows a malicious PPP peer to send undersized options, which can lead to an out-of-bounds write scenario. Exploitation of this vulnerability can potentially result in the crash of the PPP daemon or lead to arbitrary code execution with root privileges, posing a serious security risk.

Affected Version(s)

FreeBSD 15.1-RELEASE

FreeBSD 15.0-RELEASE

FreeBSD 14.4-RELEASE

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:60....
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Robert Morris
DĂ©cio BrandĂŁo (0xDBJ)
Joshua Rogers
Reo Shiseki
.