Vulnerabilites related to https://accel-ppp.org/ - accel-ppp
cve-2022-24704
Vulnerability from cvelistv5
Published
2022-02-14 21:04
Modified
2024-09-16 19:00
Severity ?
EPSS score ?
Summary
The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr->val.integer without any bound checks. If the client connects to the server and sends a large radius packet, a buffer overflow vulnerability will be triggered.
References
▼ | URL | Tags |
---|---|---|
https://github.com/accel-ppp/accel-ppp/pull/35 | x_refsource_MISC |
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
https://accel-ppp.org/ | Accel-PPP |
Version: 1.12 < |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-03T04:20:50.190Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://github.com/accel-ppp/accel-ppp/pull/35", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "Accel-PPP", vendor: "https://accel-ppp.org/", versions: [ { lessThanOrEqual: "1.12", status: "affected", version: "1.12", versionType: "custom", }, ], }, ], credits: [ { lang: "en", value: "Chloe Ong from Government Technology Agency of Singapore", }, { lang: "en", value: "Eugene Lim from Government Technology Agency of Singapore", }, { lang: "en", value: "Kar Wei Loh from Government Technology Agency of Singapore", }, ], datePublic: "2022-02-10T00:00:00", descriptions: [ { lang: "en", value: "The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr->val.integer without any bound checks. If the client connects to the server and sends a large radius packet, a buffer overflow vulnerability will be triggered.", }, ], problemTypes: [ { descriptions: [ { description: "https://cwe.mitre.org/data/definitions/120.html", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2022-02-14T21:04:29", orgId: "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", shortName: "GovTech CSG", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://github.com/accel-ppp/accel-ppp/pull/35", }, ], source: { discovery: "EXTERNAL", }, title: "Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12", x_generator: { engine: "Vulnogram 0.0.9", }, x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve_disclosure@tech.gov.sg", DATE_PUBLIC: "2022-02-10T07:47:00.000Z", ID: "CVE-2022-24704", STATE: "PUBLIC", TITLE: "Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Accel-PPP", version: { version_data: [ { version_affected: "<=", version_name: "1.12", version_value: "1.12", }, ], }, }, ], }, vendor_name: "https://accel-ppp.org/", }, ], }, }, credit: [ { lang: "eng", value: "Chloe Ong from Government Technology Agency of Singapore", }, { lang: "eng", value: "Eugene Lim from Government Technology Agency of Singapore", }, { lang: "eng", value: "Kar Wei Loh from Government Technology Agency of Singapore", }, ], data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr->val.integer without any bound checks. If the client connects to the server and sends a large radius packet, a buffer overflow vulnerability will be triggered.", }, ], }, generator: { engine: "Vulnogram 0.0.9", }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "https://cwe.mitre.org/data/definitions/120.html", }, ], }, ], }, references: { reference_data: [ { name: "https://github.com/accel-ppp/accel-ppp/pull/35", refsource: "MISC", url: "https://github.com/accel-ppp/accel-ppp/pull/35", }, ], }, source: { discovery: "EXTERNAL", }, }, }, }, cveMetadata: { assignerOrgId: "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", assignerShortName: "GovTech CSG", cveId: "CVE-2022-24704", datePublished: "2022-02-14T21:04:29.942661Z", dateReserved: "2022-02-10T00:00:00", dateUpdated: "2024-09-16T19:00:04.606Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2022-0982
Vulnerability from cvelistv5
Published
2022-03-16 14:04
Modified
2024-09-17 04:20
Severity ?
EPSS score ?
Summary
The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.
References
▼ | URL | Tags |
---|---|---|
https://github.com/xebd/accel-ppp/issues/164 | x_refsource_MISC |
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
https://accel-ppp.org/ | Accel-PPP |
Version: 1.12 < |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T23:47:42.845Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://github.com/xebd/accel-ppp/issues/164", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "Accel-PPP", vendor: "https://accel-ppp.org/", versions: [ { lessThanOrEqual: "1.12", status: "affected", version: "1.12", versionType: "custom", }, ], }, ], credits: [ { lang: "en", value: "Chloe Ong from Government Technology Agency of Singapore", }, { lang: "en", value: "Eugene Lim from Government Technology Agency of Singapore", }, ], datePublic: "2022-03-15T00:00:00", descriptions: [ { lang: "en", value: "The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.", }, ], problemTypes: [ { descriptions: [ { description: "https://cwe.mitre.org/data/definitions/120.html", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2022-03-16T14:04:22", orgId: "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", shortName: "GovTech CSG", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://github.com/xebd/accel-ppp/issues/164", }, ], source: { discovery: "EXTERNAL", }, title: "Buffer Overflow via crafted client request in Accel-PPP v1.12", x_generator: { engine: "Vulnogram 0.0.9", }, x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve_disclosure@tech.gov.sg", DATE_PUBLIC: "2022-03-15T09:32:00.000Z", ID: "CVE-2022-0982", STATE: "PUBLIC", TITLE: "Buffer Overflow via crafted client request in Accel-PPP v1.12", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Accel-PPP", version: { version_data: [ { version_affected: "<=", version_name: "1.12", version_value: "1.12", }, ], }, }, ], }, vendor_name: "https://accel-ppp.org/", }, ], }, }, credit: [ { lang: "eng", value: "Chloe Ong from Government Technology Agency of Singapore", }, { lang: "eng", value: "Eugene Lim from Government Technology Agency of Singapore", }, ], data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.", }, ], }, generator: { engine: "Vulnogram 0.0.9", }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "https://cwe.mitre.org/data/definitions/120.html", }, ], }, ], }, references: { reference_data: [ { name: "https://github.com/xebd/accel-ppp/issues/164", refsource: "MISC", url: "https://github.com/xebd/accel-ppp/issues/164", }, ], }, source: { discovery: "EXTERNAL", }, }, }, }, cveMetadata: { assignerOrgId: "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", assignerShortName: "GovTech CSG", cveId: "CVE-2022-0982", datePublished: "2022-03-16T14:04:22.485737Z", dateReserved: "2022-03-15T00:00:00", dateUpdated: "2024-09-17T04:20:24.462Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2022-24705
Vulnerability from cvelistv5
Published
2022-02-14 21:04
Modified
2024-09-16 18:39
Severity ?
EPSS score ?
Summary
The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.
References
▼ | URL | Tags |
---|---|---|
https://github.com/accel-ppp/accel-ppp/pull/35 | x_refsource_MISC |
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
https://accel-ppp.org/ | accel-ppp |
Version: 1.12 < |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-03T04:20:50.205Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://github.com/accel-ppp/accel-ppp/pull/35", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "accel-ppp", vendor: "https://accel-ppp.org/", versions: [ { lessThanOrEqual: "1.12", status: "affected", version: "1.12", versionType: "custom", }, ], }, ], credits: [ { lang: "en", value: "Chloe Ong from Government Technology Agency of Singapore", }, { lang: "en", value: "Eugene Lim from Government Technology Agency of Singapore", }, { lang: "en", value: "Kar Wei Loh from Government Technology Agency of Singapore", }, ], datePublic: "2022-02-10T00:00:00", descriptions: [ { lang: "en", value: "The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.", }, ], problemTypes: [ { descriptions: [ { description: "https://cwe.mitre.org/data/definitions/120.html", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2022-02-14T21:04:30", orgId: "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", shortName: "GovTech CSG", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://github.com/accel-ppp/accel-ppp/pull/35", }, ], source: { discovery: "EXTERNAL", }, title: "Buffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.12", x_generator: { engine: "Vulnogram 0.0.9", }, x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve_disclosure@tech.gov.sg", DATE_PUBLIC: "2022-02-10T07:32:00.000Z", ID: "CVE-2022-24705", STATE: "PUBLIC", TITLE: "Buffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.12", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "accel-ppp", version: { version_data: [ { version_affected: "<=", version_name: "1.12", version_value: "1.12", }, ], }, }, ], }, vendor_name: "https://accel-ppp.org/", }, ], }, }, credit: [ { lang: "eng", value: "Chloe Ong from Government Technology Agency of Singapore", }, { lang: "eng", value: "Eugene Lim from Government Technology Agency of Singapore", }, { lang: "eng", value: "Kar Wei Loh from Government Technology Agency of Singapore", }, ], data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.", }, ], }, generator: { engine: "Vulnogram 0.0.9", }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "https://cwe.mitre.org/data/definitions/120.html", }, ], }, ], }, references: { reference_data: [ { name: "https://github.com/accel-ppp/accel-ppp/pull/35", refsource: "MISC", url: "https://github.com/accel-ppp/accel-ppp/pull/35", }, ], }, source: { discovery: "EXTERNAL", }, }, }, }, cveMetadata: { assignerOrgId: "1a37b84a-8e51-4525-b3d6-87e2fae01dbd", assignerShortName: "GovTech CSG", cveId: "CVE-2022-24705", datePublished: "2022-02-14T21:04:30.848419Z", dateReserved: "2022-02-10T00:00:00", dateUpdated: "2024-09-16T18:39:19.344Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }