CVE-2003-0028

Fixed in a distro release EPSS 15%

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

Published 2003-03-21 · CVE record · OSV

Products: gnu glibc, mit kerberos_5, openafs, sgi irix, cray unicos, freebsd, hp-ux, hp-ux_series_700, hp-ux_series_800, ibm aix, openbsd, sun solaris, sunos

Distro releases