CVE-2020-7465

The CVE-2020-7465 issue affects MPD (Music Player Daemon) prior to version 5.9. The L2TP implementation accepts crafted L2TP control packets carrying AVP Q.931 Cause Code, leading to memory corruption that can allow a remote attacker to execute arbitrary code or cause a denial of service. Affecte...

CVE-2020-7466

The issue is in the MPD PPP implementation prior to version 5.9. A remote attacker who can send specifically crafted PPP authentication messages can trigger a read beyond the allocated memory buffer, leading to a denial of service. Affected component: MPD (Music Player Daemon) PPP handling. Root ...