Lucene search
+L

669 matches found

OSV
OSV
added 2020/12/15 5:15 p.m.13 views

CVE-2020-27067

In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152409173...

6.4CVSS8.5AI score
SaveExploits0References2
Prion
Prion
added 2020/12/15 5:15 p.m.25 views

Race condition

In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152409173...

4.4CVSS6.6AI score0.00141EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2020/12/15 4:17 p.m.76 views

CVE-2020-27067

In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152409173...

6.4CVSS5.7AI score0.00141EPSS
SaveExploits0
CVE
CVE
added 2020/12/15 4:17 p.m.116 views

CVE-2020-27067

CVE-2020-27067 affects the Android kernel’s l2tp subsystem, where a race condition can cause a use-after-free leading to local privilege escalation. Exploitation is described as requiring local access with no user interaction. The provided documents specify the affected product area and the impac...

6.4CVSS7.3AI score0.00141EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/15 4:17 p.m.44 views

CVE-2020-27067

In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152409173...

7.3AI score0.00141EPSS
SaveExploits0References1
Oracle linux
Oracle linux
added 2020/11/12 12:00 a.m.105 views

Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...

7.8CVSS7.4AI score0.034EPSS
SaveExploits6
Oracle linux
Oracle linux
added 2020/11/12 12:00 a.m.117 views

Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...

7.8CVSS7.4AI score0.034EPSS
SaveExploits6
NVD
NVD
added 2020/10/06 2:15 p.m.22 views

CVE-2020-7465

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

9.8CVSS0.03004EPSS
SaveExploits1References2
Prion
Prion
added 2020/10/06 2:15 p.m.22 views

Memory corruption

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

7.5CVSS9.8AI score0.03004EPSS
SaveExploits1References2Affected Software2
CVE
CVE
added 2020/10/06 1:40 p.m.98 views

CVE-2020-7465

The CVE-2020-7465 issue affects MPD (Music Player Daemon) prior to version 5.9. The L2TP implementation accepts crafted L2TP control packets carrying AVP Q.931 Cause Code, leading to memory corruption that can allow a remote attacker to execute arbitrary code or cause a denial of service. Affecte...

9.8CVSS9.7AI score0.03004EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/10/06 1:40 p.m.35 views

CVE-2020-7465

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

9.8AI score0.03004EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2020/10/06 1:40 p.m.57 views

CVE-2020-7465

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

9.8CVSS9.9AI score0.03004EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2020/10/06 12:00 a.m.15 views

PT-2020-19597 · Music Player Daemon · Mpd

Name of the Vulnerable Software and Affected Versions: MPD versions prior to 5.9 Description: The issue allows a remote attacker who can send specifically crafted L2TP control packets with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service due to memory corruption...

9.8CVSS9.7AI score0.03004EPSS
SaveExploits1References3
OSV
OSV
added 2020/09/17 7:15 p.m.6 views

DEBIAN-CVE-2020-0429

In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

6.7CVSS7AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/17 7:15 p.m.21 views

CVE-2020-0429

In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

6.7CVSS0.00176EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/09 11:15 p.m.20 views

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

9.8CVSS7.3AI score
SaveExploits0References2
NVD
NVD
added 2020/09/09 11:15 p.m.22 views

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

9.8CVSS0.01183EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2020/09/09 11:15 p.m.46 views

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

7.5CVSS3AI score0.01183EPSS
SaveExploits0
Prion
Prion
added 2020/09/09 11:15 p.m.24 views

Buffer overflow

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

7.5CVSS9.6AI score0.01183EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/09/09 10:45 p.m.34 views

CVE-2020-15173 Heap buffer overflow in ACCEL-PPP

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

8.2CVSS9.7AI score0.01183EPSS
SaveExploits0References2
Rows per page
Query Builder