High severity7.5NVD Advisory· Published Oct 6, 2020· Updated Jun 17, 2026

CVE-2020-7466

Description

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mpd Project/Mpd
cpe:2.3:a:mpd_project:mpd:*:*:*:*:*:*:*:*
Range: <5.9
Stormshield/Network Security2 versions
cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*range: >=4.0.0,<4.3.17
- cpe:2.3:a:stormshield:stormshield_network_security:4.4.0:*:*:*:*:*:*:*
Musicplayerdaemon/Mpdcpe-rescue
Musicplayerdaemon/MPD: FreeBSD PPP daemonllm-create
Range: <5.9

Patches

Vulnerability mechanics

References

sourceforge.net/p/mpd/svn/2374/nvdPatchThird Party Advisory
sourceforge.net/p/mpd/bugs/69/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000