CVE-2022-24705

The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve_disclosure@tech.gov.sg

Published

2022-02-14

Last modified

2024-09-16

Weaknesses

CWE-120

Affected products

• Accel-ppp (Accel-ppp)
• Accel-ppp (Httpsaccel-ppp.org)

References

• https://github.com/accel-ppp/accel-ppp/pull/35