858 matches found
CVE-2023-52557
In OpenBSD 7.3 prior to errata 016 , the npppd(8) component is vulnerable to a crash caused by receiving an L2TP message containing an AVP (Attribute-Value Pair) with an incorrect length. This issue is associated with CWE-131 (Incorrect Calculation of Buffer Size) and CWE-805 (Buffer Access with ...
PT-2024-14627
Name of the Vulnerable Software and Affected Versions OpenBSD version 7.3 Description The issue is related to a crash in npppd8 caused by an L2TP message containing an AVP Attribute-Value Pair with an incorrect length. Recommendations For OpenBSD version 7.3, apply errata 016 to resolve the issue...
CVE-2023-52557: Incorrect Calculation of Buffer Size
In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...
MikroTik RouterOS Missing Encryption of Sensitive Data (CVE-2017-6297)
The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the- middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...
PT-2024-7311
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the l2tp component of the Linux kernel, specifically with the l2tp ip6 sendmsg function in net/l2tp/l2tp ip6.c. The problem arises from an incorrect calculation...
Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-037)
The version of kernel installed on the remote host is prior to 5.15.93-55.139. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-037 advisory. A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing...
Cisco IOS XE Software Layer 2 Tunneling Protocol DoS (cisco-sa-ios-xe-l2tp-dos-eB5tuFmV)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Layer 2 Tunneling Protocol L2TP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device...
CVE-2023-51736
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the L2TP/PPTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the we...
CVE-2023-51736: Improper Neutralization of Input During Web Page Generation
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the L2TP/PPTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the we...
PT-2024-14275
Name of the Vulnerable Software and Affected Versions Skyworth Router CM5100 version 4.1.1.24 Description The issue exists due to insufficient validation of user-supplied input for the L2TP/PPTP Username parameter at the web interface. A remote attacker could exploit this by supplying specially...
Microsoft Windows Layer 2 Tunneling Protocol Remote Code Execution Vulnerability (CNVD-2023-81885)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A remote code execution vulnerability exists in the Microsoft Windows Layer 2 Tunneling Protocol, which can be exploited by an attacker to remotely execute code...
CVE-2023-41769
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41770
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41774
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-38166
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41774
CVE-2023-41774 describes a Remote Code Execution vulnerability in the Layer 2 Tunneling Protocol (L2TP) for Windows. The vulnerability is identified as a high-severity, network-exposed issue with no user interaction required. Public materials here do not provide explicit exploitation details, aff...
CVE-2023-41773 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
...
CVE-2023-41768 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
...
CVE-2023-41765
Technical details about CVE-2023-41765 (affected products, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates and additional disclosures to assess applicability and remediation.
