CVE-2022-24705

The CVE-2022-24705 vulnerability is in accel-ppp (Accel-PPP) where the rad_packet_recv function in radius/packet.c uses a memcpy into a fixed-size buffer, enabling a buffer overflow when receiving crafted client requests. This can be triggered remotely by a malicious client over the network, pote...

CVE-2022-24704

CVE-2022-24704 affects the accel-ppp project, specifically the function rad_packet_recv in opt/src/accel-pppd/radius/packet.c . The vulnerability arises because user input length is copied into a fixed buffer and into attr->val.integer without bounds checks, leading to a buffer overflow when a...

CVE-2022-0982

The CVE-2022-0982 entry concerns Accel-PPP (Accel-Ppp) server code: telnet_input_char copies user input cmdline_len into a fixed buffer b->buf without bounds checking, causing memory corruption. This vulnerability can be remotely triggered when a server connects to a malicious client, enabling...

CVE-2021-42870

CVE-2021-42870 affects ACCEL-PPP 1.12.0. The vulnerability is an out-of-bounds read in post_msg when processing a call_clear_request, per multiple sources (NVD/NVP). The CVSS metrics indicate network access with low attack complexity and impact on availability (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

CVE-2020-15173

CVE-2020-15173 affects ACCEL-PPP (an implementation of PPTP/PPPoE/L2TP/SSTP). The issue is a buffer overflow that occurs when receiving an L2TP control packet containing an AVP of type string with no hidden flags and length set to less than 6. Documents indicate the problem was fixed by commit 23...

CVE-2020-28194

CVE-2020-28194 affects accel-ppp (radius/packet.c) where a variable underflow occurs when receiving a RADIUS vendor-specific attribute whose length field is less than 2. This can lead to arbitrary code execution if the attacker controls the RADIUS server, per the NVD description. Credible referen...

CVE-2021-42054

CVE-2021-42054 affects ACCEL-PPP 1.12.0. The vulnerability is an out-of-bounds read in the function triton_context_schedule when the client exits after authentication. According to sources, an attacker could exploit this to obtain sensitive information. The NVD reports CVSS v3.1 base score 7.5 (H...