diff options
| author | Eugene Grosbein <eugen@FreeBSD.org> | 2020-09-07 04:03:11 +0800 |
|---|---|---|
| committer | Eugene Grosbein <eugen@FreeBSD.org> | 2020-09-07 04:03:11 +0800 |
| commit | f5465e43bd280762126f35f90c7586acc0e41f62 (patch) | |
| tree | a88d366dd9e3ecfcf84f1c09f3850ffd31655f98 /security | |
| parent | b34162b95d68f1207b069d4a72b797ca53e25868 (diff) | |
| download | freebsd-ports-gnome-f5465e43bd280762126f35f90c7586acc0e41f62.tar.gz freebsd-ports-gnome-f5465e43bd280762126f35f90c7586acc0e41f62.tar.zst freebsd-ports-gnome-f5465e43bd280762126f35f90c7586acc0e41f62.zip | |
Document remotely exploitable crash in the mpd5.
Reported by: chennan at SourceForge
Obtained from: http://mpd.sourceforge.net/doc5/mpd4.html#4
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 42f811249042..af77addf3973 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,33 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="cd97c7ca-f079-11ea-9c31-001b216d295b"> + <topic>Multi-link PPP protocol daemon MPD5 remotely exploitable crash</topic> + <affects> + <package> + <name>mpd5</name> + <range><lt>5.9</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Version 5.9 contains security fix for L2TP clients and servers. + Insufficient validation of incoming L2TP control packet + specially crafted by unauthenticated user might lead to unexpected + termination of the process. The problem affects mpd versions + since 4.0 that brought in initial support for L2TP. + Installations not using L2TP clients nor L2TP server configuration were not affected.</p> + </body> + </description> + <references> + <url>http://mpd.sourceforge.net/doc5/mpd4.html#4</url> + </references> + <dates> + <discovery>2020-09-04</discovery> + <entry>2020-09-06</entry> + </dates> + </vuln> + <vuln vid="bcdeb6d2-f02d-11ea-838a-0011d823eebd"> <topic>Mbed TLS -- Local side channel attack on RSA and static Diffie-Hellman</topic> <affects> |