Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2026-75883: Network‑Manager‑L2TP and PPP may crash from crafted packet
CVE-2026-75883 · published 1 month ago
Summary
The PPP daemon used by Network‑Manager‑L2TP and other PPP tools can be triggered by a specially formed PEAP request packet to overwrite internal data. This can cause the program to behave incorrectly or stop running, which may interrupt VPN or dial‑up connections. Apply the latest updates from your Linux distribution or vendor to fix the issue.
What to do
- Update bellsoft ppp to version 2.5.4-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | network-manager-l2tp | All versions |
| Debian:13 | debian | network-manager-l2tp | All versions |
| Debian:14 | debian | network-manager-l2tp | All versions |
| Ubuntu:18.04:LTS | canonical | network-manager-l2tp | All versions |
| – | ppp project | ppp | <= 2.5.0 |
| Debian:12 | debian | ppp | All versions |
| Alpaquita:25 | bellsoft | ppp |
>= 2.5.2-r0, < 2.5.4-r0 Fix: upgrade to 2.5.4-r0
|
| Alpaquita:stream | bellsoft | ppp |
>= 2.5.0-r2, < 2.5.4-r0 Fix: upgrade to 2.5.4-r0
|
| – | red hat | red hat enterprise linux 10 | All versions |
| – | red hat | red hat enterprise linux 6 | All versions |
| – | red hat | red hat enterprise linux 7 | All versions |
| – | red hat | red hat enterprise linux 8 | All versions |
| – | red hat | red hat enterprise linux 9 | All versions |
Original advisory text
Pppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service.
A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By sending a specially crafted PEAP Request packet, an attacker could cause the pppd process to corrupt global static data, leading to incorrect behavior or a system crash.
References
- https://security-tracker.debian.org/tracker/CVE-2026-75883 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-75883 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-75883 Third Party Advisory
- https://github.com/interchange/interchange/ URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75883... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-75883 Vendor Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-75883 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-75883 vdb-entry x_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2538346 issue-tracking x_refsource_REDHAT
- https://github.com/ppp-project/ppp/security/advisories/GHSA-rwr9-4vx8-vc35
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
6.8
Medium
Type
CWE-122Heap-based Buffer Overflow
CWE-120Classic Buffer Overflow
Timeline
Published18 Sep 2026
Updated4 Nov 2026
First seen14 Sep 2026
Sources
DEBIAN-CVE-2026-75883 · OSV
UBUNTU-CVE-2026-75883 · OSV
CVE-2026-75883 · NVD
CVE-2026-75883 · MITRE
CVE-2026-75883 · OSV
GHSA-rwr9-4vx8-vc35 · GHSA
BELL-CVE-2026-75883 · OSV
Track software like this
Free during beta