CVE-2020-7465

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

EUVD-2017-12974

Malware in sbrugna...

EUVD-2010-2499

Malware in sbrugna...

EUVD-2020-28591

Malware in sbrugna...

EUVD-2023-25713

Malicious code in bioql PyPI...

EUVD-2023-59700

Malicious code in bioql PyPI...

CVE-2024-53211

CVE-2024-53211 : In the Linux kernel, the l2tp_exit_net path could observe a non-empty IDR due to a radix-tree internal-node condition when idr_is_empty() was used. The bug allowed idr_is_empty() to return false despite no items, triggering a warning and potentially unsafe destruction sequence. T...

CVE-2024-26752

A vulnerability was found in the l2tpip6sendmsg function in the Linux kernel. An incorrect length calculation due to operator precedence issues can cause packet corruption and lead to communication issues...

CVE-2024-26752

In the Linux kernel, the following vulnerability has been resolved: l2tp: pass correct message length to ip6appenddata l2tpip6sendmsg needs to avoid accounting for the transport header twice when splicing more data into an already partially-occupied skbuff. To manage this, we check whether the...

UBUNTU-CVE-2013-3230

The l2tpip6recvmsg function in net/l2tp/l2tpip6.c in the Linux kernel before 3.9-rc7 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...