CVE-2020-15173highCWE-119

CVE-2020-15173: fallo de gravedad alta en accel-ppp

Heap buffer overflow in ACCEL-PPP

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear accel-ppp

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.2epss 1.2%
In ACCEL-PPP (an implementation of PPTP/PPPoE/L2TP/SSTP), there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is highly recommended to apply the patch. The problem was patched with commit 2324bcd5ba12cf28f47357a8f03cd41b7c04c52b As a workaround changes of commit 2324bcd5ba12cf28f47357a8f03cd41b7c04c52b can be applied to older versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Productos afectados
accel-ppp · accel-ppp
CVEs relacionadas — accel-ppp

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-123205HIGHaccel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsqlEPSS 0.4%