CVE-2023-52557

{"id": "CVE-2023-52557", "metrics": {}, "published": "2024-03-01T17:15:07.257", "references": [{"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig", "source": "9119a7d8-5eab-497f-8521-727c672e3725"}, {"url": "https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b", "source": "9119a7d8-5eab-497f-8521-727c672e3725"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "9119a7d8-5eab-497f-8521-727c672e3725", "description": [{"lang": "en", "value": "CWE-131"}]}], "descriptions": [{"lang": "en", "value": "In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.\n"}], "lastModified": "2024-03-01T22:22:25.913", "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725"}