Lucene search
+L

50 matches found

osv_cve
osv_cve
•added 2021/10/07 6:15 a.m.•31 views

CVE-2021-42054

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

7.5CVSS6.8AI score
SaveExploits0References1
NVD
NVD
•added 2021/10/07 6:15 a.m.•35 views

CVE-2021-42054

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

7.5CVSS0.01129EPSS
SaveExploits1References1
Prion
Prion
•added 2021/10/07 6:15 a.m.•33 views

Design/Logic Flaw

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

5CVSS7.5AI score0.01129EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/10/07 6:15 a.m.•21 views

CVE-2021-42054

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

7.5CVSS7.1AI score0.01129EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/10/07 5:28 a.m.•35 views

CVE-2021-42054

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

7.7AI score0.01129EPSS
SaveExploits1References1
CVE
CVE
•added 2021/10/07 5:28 a.m.•89 views

CVE-2021-42054

CVE-2021-42054 affects ACCEL-PPP 1.12.0. The vulnerability is an out-of-bounds read in the function triton_context_schedule when the client exits after authentication. According to sources, an attacker could exploit this to obtain sensitive information. The NVD reports CVSS v3.1 base score 7.5 (H...

7.5CVSS7.4AI score0.01129EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/10/07 5:28 a.m.•5 views

CVE-2021-42054

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

8.7CVSS0.01129EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/07 12:00 a.m.•11 views

CVE-2021-42054: Out-of-bounds Read

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

7.5CVSS5.8AI score0.01129EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/07 12:00 a.m.•9 views

PT-2021-23492

Name of the Vulnerable Software and Affected Versions ACCEL-PPP version 1.12.0 Description The issue is an out-of-bounds read in the triton context schedule function that occurs when the client exits after authentication. Recommendations For ACCEL-PPP version 1.12.0, consider disabling the triton...

7.5CVSS0.01129EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/10/07 12:00 a.m.•19 views

Accel-Ppp buffer error vulnerability

Accel-Ppp is a high performance Pptp/L2tp/Pppoe/Ipoe server for Linux. ACCEL-PPP 1.12.0 suffers from a security vulnerability that originates from a read out-of-bounds in tritoncontextschedule. An attacker can exploit the vulnerability to obtain sensitive information...

7.5CVSS7.4AI score0.01129EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/02/01 2:15 p.m.•33 views

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

9.8CVSS7.5AI score
SaveExploits0References2
NVD
NVD
•added 2021/02/01 2:15 p.m.•30 views

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

9.8CVSS9.6AI score0.03134EPSS
SaveExploits0References2
Prion
Prion
•added 2021/02/01 2:15 p.m.•31 views

Code injection

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

7.5CVSS9.6AI score0.03134EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2021/02/01 2:15 p.m.•60 views

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

7.5CVSS6.6AI score0.03134EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/02/01 1:13 p.m.•41 views

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

9.6AI score0.03134EPSS
SaveExploits0References2
CVE
CVE
•added 2021/02/01 1:13 p.m.•85 views

CVE-2020-28194

CVE-2020-28194 affects accel-ppp (radius/packet.c) where a variable underflow occurs when receiving a RADIUS vendor-specific attribute whose length field is less than 2. This can lead to arbitrary code execution if the attacker controls the RADIUS server, per the NVD description. Credible referen...

9.8CVSS9.6AI score0.03134EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/02/01 1:13 p.m.•6 views

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

9.8CVSS0.03134EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/01 12:00 a.m.•8 views

PT-2021-11456

Name of the Vulnerable Software and Affected Versions: accel-ppp affected versions not specified Description: A variable underflow exists in the radius/packet.c file of accel-ppp when receiving a RADIUS vendor-specific attribute with a length field less than 2. This issue can lead to arbitrary co...

9.8CVSS0.03134EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/01 12:00 a.m.•12 views

CVE-2020-28194: Integer Underflow (Wrap or Wraparound)

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

9.8CVSS6.3AI score0.03134EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2020/09/09 11:15 p.m.•28 views

CVE-2020-15173

In ACCEL-PPP an implementation of PPTP/PPPoE/L2TP/SSTP, there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is...

9.8CVSS7.3AI score
SaveExploits0References2
Rows per page
Query Builder