CVE-2003-0028
NoneCVSS
—
EPSS
15.0%
Published
Mar 25, 2003
CISA due date
—
The record
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | dietlibc | 0 | 0.22-2 |
| Debian:11 | glibc | 0 | 2.3.1-16 |
| Debian:11 | krb5 | 0 | 1.3.3-2 |
| Debian:12 | dietlibc | 0 | 0.22-2 |
| Debian:12 | glibc | 0 | 2.3.1-16 |
| Debian:12 | krb5 | 0 | 1.3.3-2 |
| Debian:13 | dietlibc | 0 | 0.22-2 |
| Debian:13 | glibc | 0 | 2.3.1-16 |
| Debian:13 | krb5 | 0 | 1.3.3-2 |
| Debian:3.0 | dietlibc | 0 | 0.12-2.5 |
| Debian:3.0 | glibc | 0 | 2.2.5-11.5 |
| Debian:3.0 | krb5 | 0 | 1.2.4-5woody4 |
Related vulnerabilities
- CVE-2002-0391 Integer overflow in xdr_array function in RPC servers for operating systems that use… Also affects dietlibc
- CVE-2015-7547 Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the… Also affects glibc
- CVE-2015-0235 Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and… Also affects glibc
- CVE-2014-5119 Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library… Also affects glibc
- CVE-2012-4412 Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and… Also affects glibc
- CVE-2013-4788 The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and… Also affects glibc
- CVE-2011-1071 The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow… Also affects glibc
- CVE-2010-4052 Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka… Also affects glibc