CVE-2023-52557

    Dashboard / Vulnerabilities / CVE-2023-52557

    CVE-2023-52557

    Published: 1 Mar 2024Last Modified: 1 Jul 2025

    Summary:

    Details: In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.

    References: https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b, https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -abf3a29384c582c807a621e7fc6e7c68d0cafe9b

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-52557 | CVE-DB