CVE-2026-123205— accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql
Quick assessment
Affected
accel-ppp accel-ppp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 1.15.0 版本之前的 accel-ppp 中，TCP、syslog 和 PostgreSQL 日志目标存在堆缓冲区溢出漏洞。未认证的远程对等体可以通过生成超过 LOG_MAX_SIZE 长度的日志行，导致固定大小的堆缓冲区溢出。当启用详细日志记录时，位于 client-ip-range 范围内的攻击者可发送包含大量字符串 AVP 的 L2TP Start-Control-Connection-Request 请求，从而破坏堆内存并导致守护进程崩溃。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-123205
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql
Source: CVE Program / CVE List V5
Vulnerability Description
accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that allows unauthenticated remote peers to overflow fixed heap buffers by producing log lines exceeding LOG_MAX_SIZE. Attackers within client-ip-range can send an L2TP Start-Control-Connection-Request with many string AVPs when verbose logging is enabled to corrupt heap memory and crash the daemon.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
堆缓冲区溢出
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-123205
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-123205
请登录查看更多情报信息。
Other References for CVE-2026-123205 (5)
IV. Related Vulnerabilities
Same weakness: CWE-122
-
CVE-2026-116788
FreeSWITCH: Pre-authentication heap buffer overflow in core -
CVE-2026-116785
FreeSWITCH: Pre-authentication heap out-of-bounds write in m -
CVE-2026-54914
WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI -
CVE-2026-112109
Local privilege escalation in SafeNet Authentication Client -
CVE-2026-121997
Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdp