Maple Labs

CVE search · CVE-2023-52557

CVE-2023-52557

high 7.5

In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.

Details

Status
Analyzed
Published
Last changed
Source
9119a7d8-5eab-497f-8521-727c672e3725
Weakness
CWE-131, CWE-805

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References