sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.

Project Subscriptions

Vendors Products
Openbsd Subscribe
Openbsd Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 17 Jun 2026 05:15:00 +0000

Type Values Removed Values Added
Description sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.
First Time appeared Openbsd
Openbsd openbsd
Weaknesses CWE-1284
CPEs cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*
Vendors & Products Openbsd
Openbsd openbsd
References
Metrics cvssV3_1

{'score': 5.8, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-06-17T00:53:23.246Z

Reserved: 2026-06-17T00:53:22.791Z

Link: CVE-2026-55706

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-17T06:45:03Z

Weaknesses