https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 07:14:24 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-63626 <p>Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2_ppp.c trusts the 16-bit IPv6CP len field without checking it against the received payload size. On a PPP or PPPoE link using MG_ENABLE_TCPIP and MG_ENABLE_IPV6, an unauthenticated adjacent peer can complete the required LCP exchange and send a short Configure-Request with an oversized length, causing ppp_tx_frame() to read beyond recv_queue.buf and write beyond tx.buf. The same length misuse can also expose adjacent heap bytes in a reply or hang the event loop through find_opt(). This issue is fixed in version 7.23.</p> <p>Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2_ppp.c trusts the 16-bit IPv6CP len field without checking it against the received payload size. On a PPP or PPPoE link using MG_ENABLE_TCPIP and MG_ENABLE_IPV6, an unauthenticated adjacent peer can complete the required LCP exchange and send a short Configure-Request with an oversized length, causing ppp_tx_frame() to read beyond recv_queue.buf and write beyond tx.buf. The same length misuse can also expose adjacent heap bytes in a reply or hang the event loop through find_opt(). This issue is fixed in version 7.23.</p> https://db.gcve.eu/vuln/fkie_cve-2026-63626 https://db.gcve.eu/vuln/ubuntu-cve-2026-63626 <p><strong>Affected:</strong> Ubuntu:26.10: mongoose</p> <p>[Built-in TCP/IP PPP IPV6CP option parsing bounds check]</p> <p><strong>Affected:</strong> Ubuntu:26.10: mongoose</p> <p>[Built-in TCP/IP PPP IPV6CP option parsing bounds check]</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-63626