CVE-2004-1002: Canonical Ubuntu Linux
High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.
Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location.
Affected products
Published 2005-03-01. Last modified 2026-06-16.