xebd/accel-ppp
GitHub
Releases2
Frequency3 years 8 months
Last Release
Stars309
High performance PPTP/L2TP/PPPoE/IPoE server for Linux
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 7.5 HIGH | 5 MEDIUM | ||
ACCEL-PPP 1.12.0 has an out-of-bounds read in post_msg when processing a call_clear_request. | |||
| 9.8 CRITICAL | 7.5 HIGH | ||
The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability. | |||
| 7.5 HIGH | 5 MEDIUM | ||
ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication. | |||