CVE-2026-123205 accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql

accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that allows unauthenticated remote peers to overflow fixed heap buffers by producing log lines exceeding LOGMAXSIZE. Attackers within client-ip-range can send an L2TP...

CVE-2026-123205

The accel-ppp daemon versions prior to 1.15.0 is vulnerable to a heap-based buffer overflow within the tcp , syslog , and pgsql log targets. The root cause is the processing of log lines exceeding the LOG_MAX_SIZE limit. An unauthenticated remote peer within the client-ip-range can exploit this b...