title: OpenBSD 7.3 invalid l2tp message npppd crash
description: In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.
problem types: CWE-131 Incorrect Calculation of Buffer Size
affected:
{
defaultStatus: affected
product: OpenBSD
repo: https://github.com/openbsd/src/
vendor: OpenBSD
versions:
lessThan: 7.3 errata 016, status: affected, version: 7.3, versionType: custom
}