ALEA-2021:4473 accel-config bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

accel-config bug fix and enhancement update

An update is available for accel-config. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Unspecified Vulnerability in Accel-Ppp

Accel-Ppp is a high performance Pptp/L2tp/Pppoe/Ipoe server for Linux. ACCEL-PPP 1.12.0 suffers from a security vulnerability that originates from a read out-of-bounds in tritoncontextschedule. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2021-42054

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

CVE-2021-42054

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

CVE-2021-42054

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

Design/Logic Flaw

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

CVE-2021-42054

CVE-2021-42054 affects ACCEL-PPP 1.12.0. The vulnerability is an out-of-bounds read in the function triton_context_schedule when the client exits after authentication. According to sources, an attacker could exploit this to obtain sensitive information. The NVD reports CVSS v3.1 base score 7.5 (H...

CVE-2021-42054

ACCEL-PPP 1.12.0 has an out-of-bounds read in tritoncontextschedule if the client exits after authentication...

Accel-Ppp 缓冲区错误漏洞

Accel-Ppp is a high performance Pptp/L2tp/Pppoe/Ipoe server for Linux. ACCEL-PPP 1.12.0 suffers from a security vulnerability that originates from a read out-of-bounds in tritoncontextschedule. An attacker can exploit the vulnerability to obtain sensitive information...

accel-mma84 (>=0.2.0-beta.1, <=0.2.0), bus (>=0.2.0, <=2.2.3) +14 more potentially affected by CVE-2020-36219 via atomic-option (0.1.2)

atomic-option CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on atomic-option and may be impacted: - accel-mma84 =0.2.0-beta.1, =0.2.0, =0.0.1, =0.7.0, =0.2.5, =1.0.0, =0.3.0-beta.1, =0.1.0, =0.3.0 and more Source cves: CVE-2020-36219...

accel-config bug fix and enhancement update

An update is available for accel-config. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

accel-config bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

Code injection

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution...

CVE-2020-28194

CVE-2020-28194 affects accel-ppp (radius/packet.c) where a variable underflow occurs when receiving a RADIUS vendor-specific attribute whose length field is less than 2. This can lead to arbitrary code execution if the attacker controls the RADIUS server, per the NVD description. Credible referen...

Shopify: Ability to potentially hit internal NGINX locations on *.myshopify.com by making use of the `X-Accel-Redirect` header via a configured App Proxy

By making use of the Shopify App Proxy and the X-Accel feature of NGINX, it is possible to hit any configured internal NGINX location as your current configuration is not ignoring the X-Accel-Redirect header response from an upstream service. The way it works is that NGINX allows internal...