vulnerability

FreeBSD: VID-CD97C7CA-F079-11EA-9C31-001B216D295B (CVE-2020-7466): Multi-link PPP protocol daemon MPD5 remotely exploitable crash

Try Surface Command
Back to search
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Sep 4, 2020
Added
Sep 8, 2020
Modified
Oct 20, 2020

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.


From VID-CD97C7CA-F079-11EA-9C31-001B216D295B:




Version 5.9 contains security fix for L2TP clients and servers.


Insufficient validation of incoming L2TP control packet


specially crafted by unauthenticated user might lead to unexpected


termination of the process. The problem affects mpd versions


since 4.0 that brought in initial support for L2TP.


Installations not using L2TP clients nor L2TP server configuration were not affected.



Solution

freebsd-upgrade-package-mpd5

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today