accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that allows unauthenticated remote peers to overflow fixed heap buffers by producing log lines exceeding LOG_MAX_SIZE. Attackers within client-ip-range can send an L2TP Start-Control-Connection-Request with many string AVPs when verbose logging is enabled to corrupt heap memory and crash the daemon.

Etkilenen sürümler1 yazılım

Kaynaklar7 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/accel-ppp/accel-ppp/pull/374 Yama
• github.com/…ommit/58e399400c4ef4b71472ab7c2c71c54a677a05a8 Yama
• vulncheck.com/…ized-log-lines-in-log-tcp-log-syslog-log-pgsql Üçüncü taraf
• github.com/accel-ppp/accel-ppp/releases/tag/1.15.0 Diğer
• github.com/…471b4ab99135a92bf289/accel-pppd/logs/log_tcp.c Diğer

Kayıt geçmişi

1. 5 Kas 2026 21:16Yayımlandı

İlgili açıklar

• 8,2 CVE-2026-116788FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding
• 9,1 CVE-2026-116785FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
• 8,3 CVE-2026-54914WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer
• 7,3 CVE-2026-112109Local privilege escalation in SafeNet Authentication Client SACSrv
• 8,1 CVE-2026-121997Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
• 5,3 CVE-2026-62365Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML