CVE-2003-0619

None

CVSS

—

EPSS

10.9%

Published

Aug 27, 2003

CISA due date

—

The record

Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call.

Affected packages

Ecosystem	Package	Fixed
Debian:3.0	kernel-image-2.4.18-1-alpha	2.4.18-10.
Debian:3.0	kernel-image-2.4.18-1-i386	2.4.18-11
Debian:3.0	kernel-image-2.4.18-i386bf	2.4.18-5woody4
Debian:3.0	kernel-source-2.4.18	2.4.18-13

Related vulnerabilities

CVE-2003-0001 Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null… Also affects kernel-image-2.4.18-1-i386