Описание
Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.12.0-e9d369a (исключая)
cpe:2.3:a:accel-ppp:accel-ppp:*:*:*:*:*:*:*:*
EPSS
Процентиль: 88%
0.03134
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-191
Связанные уязвимости
CVSS3: 9.8
altlinux
больше 2 лет назад
ALT-PU-2024-4819: package `accel-ppp` update to version 1.13.0-alt1
EPSS
Процентиль: 88%
0.03134
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-191