CVE-2023-52557

No fix known EPSS <1%CVSS 7.5

In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.

Published 2024-03-01 · CVE record · OSV

Products: openbsd