CVE-2003-0028

high · 7.5

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

7.5

CVSS

15.0%

EPSS (exploit prob.)

97th

EPSS percentile

2003-03-25

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
gnu	glibc	2.1
gnu	glibc	2.1.1
gnu	glibc	2.1.2
gnu	glibc	2.1.3
gnu	glibc	2.2
gnu	glibc	2.2.1
gnu	glibc	2.2.2
gnu	glibc	2.2.3
gnu	glibc	2.2.4
gnu	glibc	2.2.5
gnu	glibc	2.3
gnu	glibc	2.3.1
gnu	glibc	2.3.2
mit	kerberos_5	1.2
mit	kerberos_5	1.2.1
mit	kerberos_5	1.2.2
mit	kerberos_5	1.2.3
mit	kerberos_5	1.2.4
mit	kerberos_5	1.2.5
mit	kerberos_5	1.2.6
mit	kerberos_5	1.2.7
openafs	openafs	1.0
openafs	openafs	1.0.1
openafs	openafs	1.0.2
openafs	openafs	1.0.3
openafs	openafs	1.0.4
openafs	openafs	1.0.4a
openafs	openafs	1.1
openafs	openafs	1.1.1
openafs	openafs	1.1.1a
openafs	openafs	1.2
openafs	openafs	1.2.1
openafs	openafs	1.2.2
openafs	openafs	1.2.2a
openafs	openafs	1.2.2b
openafs	openafs	1.2.3
openafs	openafs	1.2.4
openafs	openafs	1.2.5
openafs	openafs	1.2.6
openafs	openafs	1.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0028