OpenBSD sppp_pap_input: PAP authentication bypass
Posted by shj on Jun 20------------------------------------------------------------------------
OpenBSD sppp_pap_input: PAP Authentication Bypass via Zero-Length bcmp
------------------------------------------------------------------------ Affected: OpenBSD all versions through 7.6 (fixed in -current)
Vendor: OpenBSD
Severity: High
Reporter: Argus
Date: 2026-06-16 1. SUMMARY
========== The sppp_pap_input() function in sys/net/if_spppsubr.c uses...