| Package | Affected versions | Patched versions |
|---|---|---|
| mpd | < 5.9 | 5.9 |
| stormshield network security | = 4.4.0≥ 4.0.0, < 4.3.17 | 4.3.17 |
The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service (memory corruption).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free