CVE-2004-1002

Опубликовано: 01 мар. 2005

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location.

Ссылки

http://www.securityfocus.com/archive/1/379450
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17874
Third Party Advisory
VDB Entry
https://www.ubuntu.com/usn/usn-12-1/
Third Party Advisory
http://www.securityfocus.com/archive/1/379450
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17874
Third Party Advisory
VDB Entry
https://www.ubuntu.com/usn/usn-12-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:samba:ppp:2.4.1:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02083

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-191

Связанные уязвимости

CVE-2004-1002

CVSS3: 7.5

debian

больше 20 лет назад

Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attack ...

GHSA-2wm2-cfr8-8vw9

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 83%

0.02083

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-191