CVE-2020-7466: Mpd Project Mpd

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition.

Affected products

• Mpd Project Mpd: before 5.9 (fixed in 5.9)
• Stormshield Stormshield Network Security: from 4.0.0, before 4.3.17 (fixed in 4.3.17); version 4.4.0 only

Published 2020-10-06. Last modified 2026-06-17.