VULNERABILITY INTELLIGENCE
CVE-2003-0028
CVSS score7.5 HIGH
EPSS probability15.03%
CISA KEVNot currently listed
Published2003-03-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
Primary references
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Patch, Third Party Advisory, US Government Resource
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Exploit, Vendor Advisory