{"id":"CVE-2023-52557","summary":"OpenBSD 7.3 invalid l2tp message npppd crash","details":"In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.\n","modified":"2026-10-21T08:47:08.450200046Z","published":"2024-03-01T16:14:56.065Z","database_specific":{"cna_assigner":"cisa-cg","cwe_ids":["CWE-131"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52557.json","unresolved_ranges":[{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandardRange","range":[{"introduced":"7.3"},{"fixed":"7.3 errata 016"}]}]}]},"references":[{"type":"WEB","url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig"},{"type":"WEB","url":"https://github.com/openbsd/src/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52557.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52557"},{"type":"FIX","url":"https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openbsd/src","events":[{"introduced":"0"},{"fixed":"abf3a29384c582c807a621e7fc6e7c68d0cafe9b"}],"database_specific":{"extracted_events":[{"source":"REFERENCES_COMMIT","range":[{"fixed":"abf3a29384c582c807a621e7fc6e7c68d0cafe9b"}]}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52557.json","vanir_signatures":[{"source":"https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b","target":{"file":"usr.sbin/npppd/l2tp/l2tp_subr.c"},"deprecated":false,"digest":{"line_hashes":["252207991687620231157307867516751464601","7477790675801283476192585769728895479","125607958284186576551419214814033123657","55814652926492752881875901129496052630","324062631662547870977583214179082779379","305299565498633959460164086721196608955","213308637441066806961802324221908286857","257052028291823747396283323863794895879","211281388243539926945975110982443309431","21752273253173746496886209508975186248","3714257554945000453861032135311676883","81126491692855298961780591838636059355","209875395882830449938697011182798109076","327274901907437536353128895110058968052"],"threshold":0.9},"id":"CVE-2023-52557-4fa71124","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b","target":{"file":"usr.sbin/npppd/l2tp/l2tp_subr.c","function":"avp_find"},"deprecated":false,"digest":{"function_hash":"177644512207446200987551473711565046359","length":374},"id":"CVE-2023-52557-5d3580cf","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b","target":{"file":"usr.sbin/npppd/l2tp/l2tp_subr.c","function":"avp_enum"},"deprecated":false,"digest":{"function_hash":"75169019155927852265501250106024401690","length":614},"id":"CVE-2023-52557-71217df7","signature_type":"Function","signature_version":"v1"}],"vanir_signatures_modified":"2026-10-21T08:47:08Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}