CVE-2004-1002

HIGH

ppp 2.4.1 - DoS

Title source: llm

Description

Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location.

References (3)

Scores

CVSS v3 7.5
EPSS 0.0208
EPSS Percentile 83.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-191
Status draft

Affected Products (2)

samba/ppp
canonical/ubuntu_linux

Timeline

Published Mar 01, 2005
Tracked Since Feb 18, 2026