NetSight
high7.5

CVE-2020-7466

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyo…

Impact

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition.

Affected products

VendorProductAffected versions
Mpd ProjectMpd
before 5.9
StormshieldStormshield Network Security
from 4.0.0 before 4.3.17
Version 4.4.0

Weakness classification

References