CVE-2003-0015
NoneCVSS
—
EPSS
23.9%
Published
Feb 7, 2003
CISA due date
—
The record
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | cvs | 0 | 1.11.2-5.1 |
| Debian:12 | cvs | 0 | 1.11.2-5.1 |
| Debian:13 | cvs | 0 | 1.11.2-5.1 |
| Debian:3.0 | cvs | 0 | 1.11.1p1debian-8.1 |
Related vulnerabilities
- CVE-2004-0416 Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8… Also affects cvs
- CVE-2004-0396 Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when… Also affects cvs
- CVE-2026-33630 c-ares is an asynchronous resolver library. CWE-415
- CVE-2026-18798 Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel… CWE-415
- CVE-2026-66032 libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in… CWE-415
- CVE-2026-64832 FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC… CWE-415
- CVE-2026-50685 Double free in Windows DHCP Server allows an authorized attacker to execute code over a… CWE-415
- CVE-2026-55004 Double free in Microsoft Printer Drivers allows an authorized attacker to elevate… CWE-415