CVE-2003-0462

Linux 2.4 - DoS

Title source: llm

Description

A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).

Exploits (1)

exploitdb WORKING POC VERIFIED

by IhaQueR · clocallinux

https://www.exploit-db.com/exploits/22840

View Code ZIP pw:eip

References (6)

[Patch, Vendor Advisory] http://www.debian.org/security/2004/dsa-423

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2003-198.html

[Patch, Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2003-238.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2003-239.html

[Third Party Advisory] http://www.debian.org/security/2004/dsa-358

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A309

Scores

EPSS 0.0027

EPSS Percentile 49.8%

Classification

Status draft

Affected Products (27)

mandrakesoft/mandrake_multi_network_firewall

linux/linux_kernel

... and 12 more

Timeline

Published Aug 27, 2003

Tracked Since Feb 18, 2026