VULNERABILITY INTELLIGENCE

CVE-2003-0001

CVSS score5 MEDIUM
EPSS probability72.51%
CISA KEVNot currently listed
Published2003-01-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references