accel-ppp records
7 published records for vendor accel-ppp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-125 Out-of-bounds Read2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-191 Integer Underflow (Wrap or Wraparound)1
- CWE-787 Out-of-bounds Write1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-28194No exploit | Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2.accel-ppp · accel-ppp · CWE-191 | Critical9.8 | — | 3.0% | Feb 1, 2021 |
39Monitor | CVE-2022-0982No exploit | Buffer Overflow via crafted client request in Accel-PPP v1.12accel-ppp · accel-ppp · CWE-787 | Critical9.8 | — | 1.2% | Mar 16, 2022 |
39Monitor | CVE-2020-15173No exploit | Heap buffer overflow in ACCEL-PPPaccel-ppp · accel-ppp · CWE-119 | Critical9.8 | — | 1.1% | Sep 9, 2020 |
39Monitor | CVE-2022-24705No exploit | Buffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.12accel-ppp · accel-ppp · CWE-120 | Critical9.8 | — | 1.1% | Feb 14, 2022 |
39Monitor | CVE-2022-24704No exploit | Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12accel-ppp · accel-ppp · CWE-120 | Critical9.8 | — | 1.1% | Feb 14, 2022 |
30Monitor | CVE-2021-42054No exploit | ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication.accel-ppp · accel-ppp · CWE-125 | High7.5 | — | 1.1% | Oct 7, 2021 |
30Monitor | CVE-2021-42870No exploit | ACCEL-PPP 1.12.0 has an out-of-bounds read in post_msg when processing a call_clear_request.accel-ppp · accel-ppp · CWE-125 | High7.5 | — | 1.0% | May 16, 2022 |
- CVE-2020-2819440Plan
Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2.
CriticalCVSS 9.8No exploitEPSS 3%accel-ppp · accel-pppFeb 1, 2021
- CVE-2022-098239Monitor
Buffer Overflow via crafted client request in Accel-PPP v1.12
CriticalCVSS 9.8No exploitEPSS 1%accel-ppp · accel-pppMar 16, 2022
- CVE-2020-1517339Monitor
Heap buffer overflow in ACCEL-PPP
CriticalCVSS 9.8No exploitEPSS 1%accel-ppp · accel-pppSep 9, 2020
- CVE-2022-2470539Monitor
Buffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.12
CriticalCVSS 9.8No exploitEPSS 1%accel-ppp · accel-pppFeb 14, 2022
- CVE-2022-2470439Monitor
Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12
CriticalCVSS 9.8No exploitEPSS 1%accel-ppp · accel-pppFeb 14, 2022
- CVE-2021-4205430Monitor
ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication.
HighCVSS 7.5No exploitEPSS 1%accel-ppp · accel-pppOct 7, 2021
- CVE-2021-4287030Monitor
ACCEL-PPP 1.12.0 has an out-of-bounds read in post_msg when processing a call_clear_request.
HighCVSS 7.5No exploitEPSS 1%accel-ppp · accel-pppMay 16, 2022