CVE-2023-52557

In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...

CVE-2023-52557 OpenBSD 7.3 invalid l2tp message npppd crash

In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...

CVE-2023-52557

In OpenBSD 7.3 before errata 016 , the npppd(8) component is vulnerable to a crash when processing an L2TP message containing an Attribute-Value Pair (AVP) with an incorrect length. This issue is caused by an incorrect calculation of the buffer size. To remediate this vulnerability, users of Open...