critical9.8
CVE-2020-7465
The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute a…
Impact
The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service (memory corruption).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mpd Project | Mpd | before 5.9 |
| Stormshield | Stormshield Network Security | from 4.0.0 before 4.3.17 Version 4.4.0 |