CRITICAL🇵🇱 Wersja polska

CVE-2020-7465

CVSS 9.8v3.1pub. 2020-10-06upd. 2024-11-21

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service (memory corruption).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mpd Project Mpd

    APP
    Mpd Project
    < 5.9

  • Stormshield Network Security

    APP
    Stormshield
    4.4.04.0.0 – 4.3.17 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDoS
CWE
References

Related vulnerabilities

CVE-2023-20032CRITICAL9.8PL ✓same product

ClamAV: RCE przez buffer overflow w parserze partycji HFS+

CVE-2022-37434CRITICAL9.8PL ✓same product

Buffer overflow w zlib podczas przetwarzania nagłówka gzip (inflate)

CVE-2021-31617CRITICAL9.8PL ✓same product

RCE w Stormshield Network Security — błąd zarządzania pamięcią w ASQ

CVE-2025-48707HIGH7.5same product

An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication information cou...

CVE-2023-34198HIGH7.3same product

In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24 before 3.11.25...