vulnerability

FreeBSD: VID-f55921aa-10c9-11ec-8647-00e0670f2660: MPD5 PPPoE Server remotely exploitable crash

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Sep 9, 2021
Added
Nov 4, 2022
Modified
Dec 10, 2025

Description

Version 5.9_2 contains security fix for PPPoE servers. Insufficient validation of incoming PPPoE Discovery request specially crafted by unauthenticated user might lead to unexpected termination of the process. The problem affects mpd versions since 5.0. Installations not using PPPoE server configuration were not affected.

Solution

freebsd-upgrade-package-mpd5

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.