Posted by shj on Jun 20

OpenBSD sppp_pap_input: PAP Authentication Bypass via Zero-Length bcmp

Affected:  OpenBSD all versions through 7.6 (fixed in -current)

Vendor:    OpenBSD

Severity:  High

Reporter:  Argus

Date:      2026-06-16

1. SUMMARY

==========

The sppp_pap_input() function in sys/net/if_spppsubr.c uses...