PT-2003-1772 · Linux · Linux

Published 2003-07-25 · Updated 2008-09-10 · CVE-2003-0643

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Linux versions 2.4.3-pre3 through 2.4.22-pre10

Description: The issue is related to an integer signedness error in the Linux Socket Filter implementation. This error can be exploited by attackers to cause a denial of service, resulting in a system crash.

Recommendations: For Linux versions 2.4.3-pre3 through 2.4.22-pre10, consider upgrading to a version outside of this range to resolve the issue.

Fix

Related Identifiers

CVE-2003-0643

DSA-358

Affected Products

Linux

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2003-0643 · Security Note
• http://ftp.belnet.be/linux/gentoo-portage/sys-kernel/gentoo-sources/files/gentoo-sources-2.4.CAN-2003-0643.patch · Note
• http://secunia.com/advisories/23265 · Note
• http://ultramonkey.org/bugs/cve/CAN-2003-0643.shtml · Note
• http://ultramonkey.org/bugs/cve-patch/CAN-2003-0643.patch · Note
• http://xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf · Note
• http://mirror.clarkson.edu/pub/distributions/gentoo-portage/sys-kernel/wolk-sources/ChangeLog · Note
• http://gentoo.kems.net/gentoo-x86-portage/sys-kernel/gentoo-sources/ChangeLog · Note