CVE-2003-0465

Linux Kernel 2.4 and 2.5 - Information Disclosure via strncpy Buffer Handling

Title source: llm
STIX 2.1

Description

The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.

References (4)

Core 4
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-188.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10285

Scores

EPSS 0.0186
EPSS Percentile 77.4%

Details

Status published
Products (2)
linux/linux_kernel 2.4.0
linux/linux_kernel 2.5.0
Published Aug 18, 2003
Tracked Since Feb 18, 2026