PT-2024-14627
CVE-2023-52557
·
Published
2024-03-01
·
Updated
2025-10-10
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
OpenBSD version 7.3
Description
The issue is related to a crash in npppd(8) caused by an L2TP message containing an AVP (Attribute-Value Pair) with an incorrect length.
Recommendations
For OpenBSD version 7.3, apply errata 016 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾