CVE-2022-24705 Buffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.12

The radpacketrecv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely trigge...

PT-2022-16815

Name of the Vulnerable Software and Affected Versions accel-pppd affected versions not specified Description The issue arises from a buffer overflow vulnerability in the rad packet recv function, located in opt/src/accel-pppd/radius/packet.c. This vulnerability occurs because user input len is...

PT-2022-16816

Name of the Vulnerable Software and Affected Versions FreeRADIUS affected versions not specified Description The issue is related to a memcpy buffer overflow in the rad packet recv function, located in radius/packet.c. This overflow occurs due to an overly-large recvfrom into a fixed buffer,...