CVE-2026-123205 · Package
NO FIX YET · SEE WHAT TO DO
accel-ppp, a VPN server daemon for PPP and L2TP connections, has a heap buffer overflow in its tcp, syslog and pgsql log targets. An unauthenticated remote peer can corrupt heap memory by sending an L2TP Start-Control-Connection-Request with many string AVPs while verbose logging is enabled, which crashes the daemon.
first public Nov 5, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Servers running accel-ppp as an L2TP or PPP access concentrator are exposed, reachable from the client IP range. The sources say the issue needs verbose logging enabled to be triggered, so default-configured installs with verbose logging off are likely less exposed. Teams that do not run accel-ppp can skip it.
Not affected if not-running-accel-ppp, verbose-logging-disabled
Who cares accel-ppp, l2tp, linux, vpn-server
1.15.0.1.15.0 or later.accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that allows unauthenticated remote peers to overflow fixed heap buffers by producing log lines exceeding LOG_MAX_SIZE. Attackers within client-ip-range can send an L2TP Start-Control-Connection-Request with many string AVPs when verbose logging is enabled to corrupt heap memory and crash the daemon.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.