https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-42870.htmlhttps://patchthecve.com/cve/CVE-2021-42870.htmlWed, 17 Jun 2026 04:10:14 +0000HIGH 7.5: ACCEL-PPP 1.12.0 has an out-of-bounds read in post_msg when processing a call_clear_request.https://patchthecve.com/cve/CVE-2022-0982.htmlhttps://patchthecve.com/cve/CVE-2022-0982.htmlWed, 17 Jun 2026 04:21:35 +0000CRITICAL 9.8: The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely triggerhttps://patchthecve.com/cve/CVE-2022-24705.htmlhttps://patchthecve.com/cve/CVE-2022-24705.htmlWed, 17 Jun 2026 04:32:20 +0000CRITICAL 9.8: The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious client, crafted client requests can remotely triggerhttps://patchthecve.com/cve/CVE-2022-24704.htmlhttps://patchthecve.com/cve/CVE-2022-24704.htmlWed, 17 Jun 2026 04:32:19 +0000CRITICAL 9.8: The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr->val.integer without any bound checks. If the client connects to the server and sends a large radius packet, a buffer overflow vhttps://patchthecve.com/cve/CVE-2021-42054.htmlhttps://patchthecve.com/cve/CVE-2021-42054.htmlWed, 17 Jun 2026 04:09:13 +0000HIGH 7.5: ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication.