Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2003-0462

6 documents6 sources
Severity
1.2LOW
EPSS
0.3%
top 49.84%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
4
Linux Linux KernelMandrakesoft Mandrake LinuxMandrakesoft Mandrake Linux Corporate Server+1 more
Timeline
PublishedAug 27
Latest updateApr 29

Description

A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).

CVSS vector

AV:L/AC:H/C:N/I:N/A:PExploitability: 1.9 | Impact: 2.9

Affected Packages4 packages

▶NVDlinux/linux_kernel22 versions+21

Patches

Patch: www.debian.org ↗Patch: www.redhat.com ↗Patch: www.debian.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-q96r-f8gg-v2g6: A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base↗2022-04-29
▶
CVEList
CVE-2003-0462: A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base↗2003-07-25
▶

💥Exploits & PoCs

1
Exploit-DB
Linux Kernel 2.4 - SUID 'execve()' System Call Race Condition Executable File Read↗2003-06-26
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2003-08-21
▶

💬Community

1
Bugzilla
CVE-2003-0462 security flaw↗2018-08-16
▶