CVE-2020-28194

概要

参考情報

• accel-ppp/accel-ppp commit e9d369a · Patch
• accel-ppp/accel-ppp security advisory · Patch

accel-ppp のその他の脆弱性

• CVE-2021-42870高 7.5ACCEL-PPP 1.12.0 has an out-of-bounds read in post_msg when processing a call_clear_request.
• CVE-2022-0982緊急 9.8The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline…
• CVE-2022-24705緊急 9.8The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed bu…
• CVE-2022-24704緊急 9.8The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is c…
• CVE-2021-42054高 7.5ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication.