CVE-2003-0001
NoneCVSS
—
EPSS
70.2%
Published
Jan 17, 2003
CISA due date
—
The record
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.0 | kernel-image-2.2.20-i386 | 0 | 2.2.20-5woody3 |
| Debian:3.0 | kernel-image-2.4.17-ia64 | 0 | kernel-image-2.4.17-ia64 |
| Debian:3.0 | kernel-image-2.4.17-s390 | 0 | 2.4.17-2.woody.3 |
| Debian:3.0 | kernel-image-2.4.18-1-i386 | 0 | 2.4.18-8 |
| Debian:3.0 | kernel-image-2.4.18-i386bf | 0 | 2.4.18-5woody1. |
| Debian:3.0 | kernel-patch-2.4.17-mips | 0 | 2.4.17-0.020226.2.woody2 |
| Debian:3.0 | kernel-patch-2.4.17-s390 | 0 | 0.0.20020816-0.woody.2 |
| Debian:3.0 | kernel-patch-2.4.18-powerpc | 0 | 2.4.18-1woody1 |
| Debian:3.0 | kernel-source-2.2.20 | 0 | 2.2.20-5woody2 |
| Debian:3.0 | kernel-source-2.4.17 | 0 | 2.4.17-1woody1 |
| Debian:3.0 | kernel-source-2.4.18 | 0 | 2.4.18-9 |
Related vulnerabilities
- CVE-2003-0619 Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before… Also affects kernel-image-2.4.18-1-i386
- CVE-2026-53586 libgit2 is a portable C implementation of the Git core methods provided as a linkable… CWE-200
- CVE-2026-60589 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… CWE-200
- CVE-2026-73622 GitPython before 3.1.55 fails to disable environment variable expansion in… CWE-200
- CVE-2026-73229 Django REST framework is a powerful and flexible toolkit for building Web APIs. CWE-200
- CVE-2026-71849 Hono is a Web application framework that provides support for any JavaScript runtime. CWE-200
- CVE-2026-69153 PostCSS takes a CSS file and provides an API to analyze and modify its rules by… CWE-200
- CVE-2026-67320 axios in a Node.js deployment using the HTTP adapter can route requests through an… CWE-200