CVE-2003-0028
NoneCVSS
—
EPSS
15.0%
Published
Mar 25, 2003
CISA due date
—
The record
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | dietlibc | 0 | 0.22-2 |
| Debian:11 | glibc | 0 | 2.3.1-16 |
| Debian:11 | krb5 | 0 | 1.3.3-2 |
| Debian:12 | dietlibc | 0 | 0.22-2 |
| Debian:12 | glibc | 0 | 2.3.1-16 |
| Debian:12 | krb5 | 0 | 1.3.3-2 |
| Debian:13 | dietlibc | 0 | 0.22-2 |
| Debian:13 | glibc | 0 | 2.3.1-16 |
| Debian:13 | krb5 | 0 | 1.3.3-2 |
| Debian:3.0 | dietlibc | 0 | 0.12-2.5 |
| Debian:3.0 | glibc | 0 | 2.2.5-11.5 |
| Debian:3.0 | krb5 | 0 | 1.2.4-5woody4 |
Related vulnerabilities
- CVE-2002-0391 Integer overflow in xdr_array function in RPC servers for operating systems that use… Also affects dietlibc
- CVE-2021-3326 The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when… Also affects glibc
- CVE-2009-5155 In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c… Also affects glibc
- CVE-2017-12133 Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU… Also affects glibc
- CVE-2015-5180 res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of… Also affects glibc
- CVE-2017-1000366 glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to… Also affects glibc
- CVE-2014-9984 nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly… Also affects glibc
- CVE-2016-10228 The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when… Also affects glibc