Out-of-bounds

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

CVE-2021-42870

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

CVE-2021-42870

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

CVE-2021-42870

CVE-2021-42870 affects ACCEL-PPP 1.12.0. The vulnerability is an out-of-bounds read in post_msg when processing a call_clear_request, per multiple sources (NVD/NVP). The CVSS metrics indicate network access with low attack complexity and impact on availability (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

ACCEL-PPP 缓冲区错误漏洞

ACCEL-PPP is a high performance Pptp/L2tp/Pppoe/Ipoe server for Linux. A security vulnerability exists in ACCEL-PPP version 1.12.0, which stems from an out-of-bounds read in postmsg when processing callclearrequest...

PT-2022-11723

Name of the Vulnerable Software and Affected Versions ACCEL-PPP version 1.12.0 Description The issue is related to an out-of-bounds read in the post msg function when processing a call clear request. Recommendations For ACCEL-PPP version 1.12.0, at the moment, there is no information about a newe...

CVE-2021-42870: Out-of-bounds Read

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

Slackware: Security Advisory (SSA:2015-111-11)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2020-064-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS : tcpdump vulnerabilities (USN-5331-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5331-2 advisory. USN-5331-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS...

CVE-2022-0982 Buffer Overflow via crafted client request in Accel-PPP v1.12

The telnetinputchar function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdlinelen is copied into a fixed buffer b-buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger...

CVE-2022-0982

The CVE-2022-0982 entry concerns Accel-PPP (Accel-Ppp) server code: telnet_input_char copies user input cmdline_len into a fixed buffer b->buf without bounds checking, causing memory corruption. This vulnerability can be remotely triggered when a server connects to a malicious client, enabling...

Ubuntu 16.04 ESM : tcpdump vulnerabilities (USN-5331-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5331-1 advisory. It was discovered that tcpdump incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly...

Accel-Ppp 缓冲区错误漏洞

Accel-Ppp is a high performance Pptp/L2tp/Pppoe/Ipoe server for Linux. A security vulnerability exists in Accel-Ppp, which stems from user input cmdlinelen being copied into a fixed buffer b-buf without any binding checks...

CVE-2022-24704 Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12

The radpacketrecv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr-val.integer without any bound checks. If the client connects to the server and sends a large radius packet, a buffer overflow...

accel-ppp 安全漏洞

Accel-Ppp is a high performance Pptp/L2tp/Pppoe/Ipoe server for Linux. A security vulnerability exists in accel-ppp that stems from a buffer overflow vulnerability in the rad packet recv function in accel-pppd radius packet.c, which is triggered if a client connects to the server side and sends a...

Accel-Ppp 安全漏洞

Accel-Ppp is a high performance Pptp/L2tp/Pppoe/Ipoe server for Linux. A security vulnerability exists in accel-ppp, which stems from a memcpy buffer overflow in the rad packet recv function in radius packet.c. If the server is connected to a malicious client, a carefully crafted client request c...

AlmaLinux 8 : ppp (ALSA-2020:0633)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:0633 advisory. - eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. CVE-2020-8597 Note that Nessus has not...

Mageia: Security Advisory (MGASA-2020-0139)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0368)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...