CVE-2020-28194

Name of the Vulnerable Software and Affected Versions: accel-ppp (affected versions not specified)

Description: A variable underflow exists in the radius/packet.c file of accel-ppp when receiving a RADIUS vendor-specific attribute with a length field less than 2. This issue can lead to arbitrary code execution, but only when the attacker controls the RADIUS server.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.