Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-52557

OpenBSD 7.3 invalid l2tp message npppd crash

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisa-cg

Description

In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenBSD OpenBSD

Default version status: affected

  • 7.3 to < 7.3 errata 016affected

References