Description (CNA)
The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / MPD: FreeBSD PPP daemon | affected All versions prior to version 5.9 |
CWE
CWE-125
References
ADP enrichment
No English description supplied.