CVE-2003-0015
NoneCVSS
—
EPSS
23.9%
Published
Feb 7, 2003
CISA due date
—
The record
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | cvs | 0 | 1.11.2-5.1 |
| Debian:12 | cvs | 0 | 1.11.2-5.1 |
| Debian:13 | cvs | 0 | 1.11.2-5.1 |
| Debian:3.0 | cvs | 0 | 1.11.1p1debian-8.1 |
Related vulnerabilities
- CVE-2017-12836 CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote… Also affects cvs
- CVE-2004-0416 Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8… Also affects cvs
- CVE-2004-0396 Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when… Also affects cvs
- CVE-2026-109271 ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the… CWE-415
- CVE-2026-107886 OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. CWE-415
- CVE-2026-107209 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-415
- CVE-2026-98154 In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO… CWE-415
- CVE-2026-87585 Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a… CWE-415