OESA-2026-4117

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4117
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-4117.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-4117
Upstream
Published
2026-09-25T01:28:37Z
Modified
2026-09-25T01:45:13Z
Severity
  • 6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
ppp security update
Details

The Point-to-Point Protocol (PPP) provides a standard way to establish a network connection over a serial link. At present, this package supports IP and IPV6 and the protocols layered above them, such as TCP and UDP. The Linux port of this package also has support for IPX.

Security Fix(es):

The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacket_buf without checking the available space and without implementing outgoing PEAP fragmentation. Thus a pppd process connecting to a server which requests PEAP authentication can be induced to corrupt global static data following the outpacket_buf array, most likely causing incorrect behavior or a crash.(CVE-2026-75883)

Database specific 
{
    "severity":  "Medium"
}
References

Affected packages

openEuler:24.03-LTS-SP4 / ppp

Package

Name
ppp
Purl
pkg:rpm/openEuler/ppp&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.0-6.oe2403sp4

Ecosystem specific 

{
    "aarch64":  [
        "ppp-2.5.0-6.oe2403sp4.aarch64.rpm",
        "ppp-debuginfo-2.5.0-6.oe2403sp4.aarch64.rpm",
        "ppp-debugsource-2.5.0-6.oe2403sp4.aarch64.rpm",
        "ppp-devel-2.5.0-6.oe2403sp4.aarch64.rpm"
    ],
    "noarch":  [
        "ppp-help-2.5.0-6.oe2403sp4.noarch.rpm"
    ],
    "src":  [
        "ppp-2.5.0-6.oe2403sp4.src.rpm"
    ],
    "x86_64":  [
        "ppp-2.5.0-6.oe2403sp4.x86_64.rpm",
        "ppp-debuginfo-2.5.0-6.oe2403sp4.x86_64.rpm",
        "ppp-debugsource-2.5.0-6.oe2403sp4.x86_64.rpm",
        "ppp-devel-2.5.0-6.oe2403sp4.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-4117.json"