CVE-2023-52557

In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...

CVE-2023-52557 OpenBSD 7.3 invalid l2tp message npppd crash

In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...

CVE-2023-52557

In OpenBSD 7.3 prior to errata 016 , the npppd(8) component is vulnerable to a crash caused by receiving an L2TP message containing an AVP (Attribute-Value Pair) with an incorrect length. This issue is associated with CWE-131 (Incorrect Calculation of Buffer Size) and CWE-805 (Buffer Access with ...