CVE-2003-0462

Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 25 Jul 2003, 04:00
Last modified:08 Aug 2024, 01:58

Vulnerability Summary

Overall Risk (default)
low
15/100
CVSS Score
1.2 LOW
v2.0 (nvd)
EPSS Score
0.27% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

25 Jul 2003, 04:00
Published
Vulnerability first disclosed
08 Aug 2024, 01:58
Last Modified
Vulnerability information updated

Description

A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).

CVSS Metrics

  • v2.0•LOW•Score: 1.2AV:L/AC:H/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 0.27%• Percentile: 50%

Affected Systems

  • linux•linux_kernel

    2.4.0 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.4.5 | 2.4.6 | 2.4.7 | 2.4.8 | 2.4.9 | 2.4.10 | 2.4.11 | 2.4.12 | 2.4.13 | 2.4.14 | 2.4.15 | 2.4.16 | 2.4.17 | 2.4.18 | 2.4.19 | 2.4.20 | 2.4.21

  • mandrakesoft•mandrake_linux

    8.2 | 9.0

  • mandrakesoft•mandrake_linux_corporate_server

    2.1

  • mandrakesoft•mandrake_multi_network_firewall

    8.2

References (6)