Critical severity9.8NVD Advisory· Published Oct 6, 2020· Updated Jun 17, 2026

CVE-2020-7465

Description

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service (memory corruption).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mpd Project/Mpd
cpe:2.3:a:mpd_project:mpd:*:*:*:*:*:*:*:*
Range: <5.9
Stormshield/Stormshield Network Security2 versions
cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*range: >=4.0.0,<4.3.17
- cpe:2.3:a:stormshield:stormshield_network_security:4.4.0:*:*:*:*:*:*:*
MPD/MPDdescription
Musicplayerdaemon/Mpdllm-create
Range: <5.9
Musicplayerdaemon/MPD: FreeBSD PPP daemonllm-create
Range: <5.9

Patches

Vulnerability mechanics

References

sourceforge.net/p/mpd/svn/2377/nvdPatchThird Party Advisory
sourceforge.net/p/mpd/bugs/70/nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000