What the vulnerability does

01Description

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service (memory corruption).

Key dates

02Disclosure timeline

October 6, 2020 CVE published
August 4, 2024 Record updated