CVE-2022-24705
- Source
- https://cve.org/CVERecord?id=CVE-2022-24705
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24705.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-24705
- Published
- 2022-02-14T21:04:30.848Z
- Modified
- 2026-07-15T01:49:11.852610749Z
- Summary
- Buffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.12
- Details
-
The radpacketrecv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24705.json", "cna_assigner": "GovTech CSG" }- References
Affected packages
Git / github.com/accel-ppp/accel-ppp
Affected ranges
- Type
- GIT
- Repo
- https://github.com/accel-ppp/accel-ppp
- Events
- Database specific
{ "cpe": "cpe:2.3:a:accel-ppp:accel-ppp:*:*:*:*:*:*:*:*", "source": [ "AFFECTED_FIELD", "CPE_RANGE" ], "extracted_events": [ { "introduced": "1.12" }, { "last_affected": "1.12" }, { "introduced": "0" }, { "fixed": "1.12.0" } ] }