CVE-2023-52557
01.03.2024, 17:15
In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.Enginsight
| Vendor | Product | Version |
|---|---|---|
| openbsd | openbsd | 𝑥 < 7.3 |
| openbsd | openbsd | 7.3 |
| openbsd | openbsd | 7.3:errata_001 |
| openbsd | openbsd | 7.3:errata_002 |
| openbsd | openbsd | 7.3:errata_003 |
| openbsd | openbsd | 7.3:errata_004 |
| openbsd | openbsd | 7.3:errata_005 |
| openbsd | openbsd | 7.3:errata_006 |
| openbsd | openbsd | 7.3:errata_007 |
| openbsd | openbsd | 7.3:errata_008 |
| openbsd | openbsd | 7.3:errata_009 |
| openbsd | openbsd | 7.3:errata_010 |
| openbsd | openbsd | 7.3:errata_011 |
| openbsd | openbsd | 7.3:errata_012 |
| openbsd | openbsd | 7.3:errata_013 |
| openbsd | openbsd | 7.3:errata_014 |
| openbsd | openbsd | 7.3:errata_015 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-131 - Incorrect Calculation of Buffer SizeThe software does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
- CWE-805 - Buffer Access with Incorrect Length ValueThe software uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.
References