← CVE Radar
CVE-2026-123205accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql
accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that allows unauthenticated remote peers to overflow fixed heap buffers by producing log lines exceeding LOG_MAX_SIZE. Attackers within client-ip-range can send an L2TP Start-Control-Connection-Request with many string AVPs when verbose logging is enabled to corrupt heap memory and crash the daemon.
8.3 HIGHEPSS 0.41%Not in KEVNVD: Received
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.3 | HIGH | 4.0VulnCheck (CNA) | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N |
| 6.5 | MEDIUM | 3.1VulnCheck (CNA) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H |
Details
- CVE ID
- CVE-2026-123205
- Status
- Received
- Assigner (CNA)
- VulnCheck
- Published
- Nov 5, 2026
- Last modified
- 2026-11-05 19:17 UTC
- Weaknesses
- CWE-122 · Heap-based Buffer Overflow
Affected Products
As published by the CNA in the CVE record.
accel-pppaccel-ppp1 version range
- before 1.15.0
References
- github.com https://github.com/accel-ppp/accel-ppp/blob/048d31cb446879e0d1a1471b4ab99135a92bf289/accel-pppd/logs/log_tcp.c#L55-L67
- github.com https://github.com/accel-ppp/accel-ppp/commit/58e399400c4ef4b71472ab7c2c71c54a677a05a8
- github.com https://github.com/accel-ppp/accel-ppp/pull/374
- github.com https://github.com/accel-ppp/accel-ppp/releases/tag/1.15.0
- vulncheck.com https://www.vulncheck.com/advisories/accel-ppp-before-1.15.0-heap-based-buffer-overflow-via-oversized-log-lines-in-log-tcp-log-syslog-log-pgsql