Unscored severity · published Aug 24, 2006
CVE-2006-4304
Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to…
–
CVSS
11.9%
EPSS
No
On KEV
Description
Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol (LCP) packets with an option length that exceeds the overall length, which triggers the overflow in (1) pppoe and (2) ippp. NOTE: this issue was originally incorrectly reported for the ppp driver.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
4.11; 5.3; 5.4; 5.5; 6.0; 6.1 · source: NVD
NE
Netbsd · Netbsd
2.0; 3.0; 4.0 · source: NVD
OP
Openbsd · Openbsd
3.8; 3.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4304
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4304
Patch
http://secunia.com/advisories/21587
Patch
http://secunia.com/advisories/21731
Vendor Advisory
http://security.FreeBSD.org/advisories/FreeBSD-SA-06:18.ppp.asc
security.freebsd.org
http://security.FreeBSD.org/patches/SA-06:18/ppp4x.patch
securitytracker.com
http://securitytracker.com/id?1016745
More from Freebsd
10.0
CVE-2024-43102
umtx Kernel panic or Use-After-Free
10.0
CVE-2018-17160
In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can permit a guest operating system to…
9.8
CVE-2026-101306
Multiple jail filesystem root escapes
9.8
CVE-2026-58082
Stack based buffer overflow in iconv(3)
9.8
CVE-2026-58081
Heap based buffer overflow in iconv(3)