p PatchFirst

CVE-2003-0028

CVE-2003-0028

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

EPSS 15.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • dietlibc Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.22-2

    Update to 0.22-2

  • dietlibc Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.22-2

    Update to 0.22-2

  • dietlibc Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.22-2

    Update to 0.22-2

  • glibc Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.3.1-16

    Update to 2.3.1-16

  • glibc Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.3.1-16

    Update to 2.3.1-16

  • glibc Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.3.1-16

    Update to 2.3.1-16

  • krb5 Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.3.3-2

    Update to 1.3.3-2

  • krb5 Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.3.3-2

    Update to 1.3.3-2

  • krb5 Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.3.3-2

    Update to 1.3.3-2

Original sources

Check your server →