CVE-2021-42870

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

CVE-2021-42870

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

Out-of-bounds

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

CVE-2021-42870

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

CVE-2021-42870

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

CVE-2021-42870

CVE-2021-42870 affects ACCEL-PPP 1.12.0. The vulnerability is an out-of-bounds read in post_msg when processing a call_clear_request, per multiple sources (NVD/NVP). The CVSS metrics indicate network access with low attack complexity and impact on availability (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

PT-2022-11723

Name of the Vulnerable Software and Affected Versions ACCEL-PPP version 1.12.0 Description The issue is related to an out-of-bounds read in the post msg function when processing a call clear request. Recommendations For ACCEL-PPP version 1.12.0, at the moment, there is no information about a newe...

CVE-2021-42870: Out-of-bounds Read

ACCEL-PPP 1.12.0 has an out-of-bounds read in postmsg when processing a callclearrequest...

accel-config bug fix and enhancement update

An update is available for accel-config. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

GSD-2022-1001322 iio: accel: mma8452: use the correct logic to get mma8452_data

iio: accel: mma8452: use the correct logic to get mma8452data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

Memory corruption

The telnetinputchar function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdlinelen is copied into a fixed buffer b-buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger...

CVE-2022-0982 Buffer Overflow via crafted client request in Accel-PPP v1.12

The telnetinputchar function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdlinelen is copied into a fixed buffer b-buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger...

CVE-2022-0982

The telnetinputchar function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdlinelen is copied into a fixed buffer b-buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger...

PT-2022-13571

Name of the Vulnerable Software and Affected Versions accel-pppd affected versions not specified Description The issue is related to a memory corruption vulnerability in the telnet input char function. This vulnerability occurs because user input cmdline len is copied into a fixed buffer b-buf...

Accel-Ppp 缓冲区错误漏洞

Accel-Ppp is a high performance Pptp/L2tp/Pppoe/Ipoe server for Linux. A security vulnerability exists in Accel-Ppp, which stems from user input cmdlinelen being copied into a fixed buffer b-buf without any binding checks...

PT-2022-37903

Уязвимость функции mma8452 show scale avail модуля drivers/iio/accel/mma8452.c драйвера поддержки различных типов встроенных датчиков ядра операционной системы Linux связана с разыменованием указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2022-24704

CVE-2022-24704 affects the accel-ppp project, specifically the function rad_packet_recv in opt/src/accel-pppd/radius/packet.c . The vulnerability arises because user input length is copied into a fixed buffer and into attr->val.integer without bounds checks, leading to a buffer overflow when a...

CVE-2022-24704

The radpacketrecv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr-val.integer without any bound checks. If the client connects to the server and sends a large radius packet, a buffer overflow...

CVE-2022-24704 Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12

The radpacketrecv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr-val.integer without any bound checks. If the client connects to the server and sends a large radius packet, a buffer overflow...

PT-2022-16815

Name of the Vulnerable Software and Affected Versions accel-pppd affected versions not specified Description The issue arises from a buffer overflow vulnerability in the rad packet recv function, located in opt/src/accel-pppd/radius/packet.c. This vulnerability occurs because user input len is...