Approved changes feed: RSS · Atom

cpe:2.3:a:https://accel-ppp.org/:accel-ppp:*:*:*:*:*:*:*:*

part: a version: accel-ppp update: *

VendorHttps (d7181f43-5065-54de-83f7-090f042665aa)
Product//Accel Ppp.Org/ (b007149f-5730-575f-82cd-6d268b899930)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-24705 vulnerable 2026-06-03 14:46:30.995822 Buffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.12
The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.
Published: 2022-02-14T21:04:30.848Z
Updated: 2024-09-16T18:39:19.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24704 vulnerable 2026-06-03 14:46:30.994755 Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12
The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr->val.integer without any bound checks. If the client connects to the server and sends a large radius packet, a buffer overflow vulnerability will be triggered.
Published: 2022-02-14T21:04:29.942Z
Updated: 2024-09-16T19:00:04.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0982 vulnerable 2026-06-03 14:45:57.510454 Buffer Overflow via crafted client request in Accel-PPP v1.12
The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.
Published: 2022-03-16T14:04:22.485Z
Updated: 2024-09-17T04:20:24.462Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.