CVE-2020-7466CWE-125

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read…

published October 6, 2020

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02016 · 80.8th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2020-10-06T13:43Z
EPSS history
Timeline
  • 06 OCT 13:43Z
    The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read…
    cvelistv5