FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Multi-link PPP protocol daemon MPD5 remotely exploitable crash

Affected packages
mpd5 < 5.9


VuXML ID cd97c7ca-f079-11ea-9c31-001b216d295b
Discovery 2020-09-04
Entry 2020-09-06
Modified 2020-09-07

Version 5.9 contains security fix for L2TP clients and servers. Insufficient validation of incoming L2TP control packet specially crafted by unauthenticated user might lead to unexpected termination of the process. The problem affects mpd versions since 4.0 that brought in initial support for L2TP. Installations not using L2TP clients nor L2TP server configuration were not affected.


CVE Name CVE-2020-7465
CVE Name CVE-2020-7466