vulnerability

FreeBSD: VID-F55921AA-10C9-11EC-8647-00E0670F2660: MPD5 PPPoE Server remotely exploitable crash

Severity
9
CVSS
(AV:N/AC:L/Au:N/C:C/I:N/A:C)
Published
09/04/2021
Added
11/04/2022
Modified
02/19/2025

Description



Version 5.9_2 contains security fix for PPPoE servers.


Insufficient validation of incoming PPPoE Discovery request


specially crafted by unauthenticated user might lead to unexpected


termination of the process. The problem affects mpd versions


since 5.0. Installations not using PPPoE server configuration


were not affected.



Solution

freebsd-upgrade-package-mpd5

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.