| Package | Affected versions | Patched versions |
|---|---|---|
| mpd | < 5.9 | 5.9 |
| stormshield network security | = 4.4.0≥ 4.0.0, < 4.3.17 | 4.3.17 |
The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free