Out-of-Bounds Read in ACCEL-PPP Affects Multiple Versions
CVE-2021-42054

7.5HIGH

Key Information:

Vendor

Accel-ppp

Status
Accel-ppp
Vendor
CVE Published:
7 October 2021

What is CVE-2021-42054?

ACCEL-PPP version 1.12.0 contains a vulnerability that may lead to an out-of-bounds read in the triton_context_schedule function. This issue arises if a client exits after authentication, potentially allowing an attacker to read sensitive data beyond the allocated memory. It is critical for users of the affected version to be aware of this vulnerability and take appropriate actions to mitigate the risks associated with it. You can find more information on this issue in the official GitHub repository.

References

https://github.com/xebd/accel-ppp/issues/156
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.