CVE-2020-7465

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

Memory corruption

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

CVE-2020-7465

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

CVE-2020-7465

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

CVE-2020-7465

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

CVE-2020-7465

The CVE-2020-7465 issue affects MPD (Music Player Daemon) prior to version 5.9. The L2TP implementation accepts crafted L2TP control packets carrying AVP Q.931 Cause Code, leading to memory corruption that can allow a remote attacker to execute arbitrary code or cause a denial of service. Affecte...

PT-2020-19597 · Music Player Daemon · Mpd

Name of the Vulnerable Software and Affected Versions: MPD versions prior to 5.9 Description: The issue allows a remote attacker who can send specifically crafted L2TP control packets with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service due to memory corruption...

CVE-2020-7465: Out-of-bounds Write

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

CVE-2020-0429

In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

DEBIAN-CVE-2020-0429

In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2020-5813

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a use after free in the l2tp session delete function of l2tp core.c in the Android kernel, which could lead to memory corruption. This could allow an...

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

Buffer overflow

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

CVE-2020-15173 Heap buffer overflow in ACCEL-PPP

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

CVE-2020-15173: Improper Restriction of Operations within the Bounds of a Memory Buffer

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

PT-2020-14246

Name of the Vulnerable Software and Affected Versions ACCEL-PPP affected versions not specified Description A buffer overflow issue occurs when receiving an L2TP control packet with an AVP of type string and no hidden flags, where the length is set to less than 6. This issue is particularly...

FreeBSD : Multi-link PPP protocol daemon MPD5 remotely exploitable crash (cd97c7ca-f079-11ea-9c31-001b216d295b)

Version 5.9 contains security fix for L2TP clients and servers. Insufficient validation of incoming L2TP control packet specially crafted by unauthenticated user might lead to unexpected termination of the process. The problem affects mpd versions since 4.0 that brought in initial support for L2T...