CVE-2026-123205

{
  "etk_id": "ETK-2026-3659",
  "cve_id": "CVE-2026-123205",
  "display_id": "CVE-2026-123205",
  "ghsa_id": null,
  "euvd_id": "EUVD-2026-117650",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Heap buffer overflow in accel-ppp logging targets",
  "summary": "accel-ppp versions before 1.15.0 are affected by a heap buffer overflow in the tcp, syslog, and pgsql logging targets. An unauthenticated remote peer permitted by the client IP range can corrupt process memory and crash the daemon when verbose logging is enabled.",
  "mitigation": "Upgrade accel-ppp to version 1.15.0 or later. Until upgraded, disable verbose logging and restrict the configured client IP range to trusted peers.",
  "vendor": "accel-ppp",
  "product": "accel-ppp",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 1.15.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.15.0"
      ],
      "package_name": "accel-ppp",
      "purl": null
    }
  ],
  "cwes": [
    122
  ],
  "cvss_score": 8.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 25.4299544,
  "t0_at": "2026-11-05T18:16:40.464000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-05T19:16:00.586721+00:00",
      "days": 0.04120512408564815,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T18:16:40.464000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-05T18:16:40.464000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T18:16:40.464000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-123205"
    }
  }
}