CVE-2003-0619
mediumPriorität · verfolgen · 34EPSS 0.109 · 96. PerzentilExploit · funktionalEUUSEPSS · bewertet 2026-10-27
Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Release notes, driver notes, and driver disks for this update are available at the following URL: http://www.redhat.com/support/errata/rhel/ Before applying this update, make sure all previously released errata relevant to your system have been applied, especially the additional packages from RHSA-2002:205 and RHSA-2002:206 respectively. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:198 - BehobenRed Hat Linux Advanced Workstation 2.1redhat_csaf
Release notes, driver notes, and driver disks for this update are available at the following URL: http://www.redhat.com/support/errata/rhel/ Before applying this update, make sure all previously released errata relevant to your system have been applied, especially the additional packages from RHSA-2002:205 and RHSA-2002:206 respectively. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:198 - BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Release notes, driver notes, and driver disks for this update are available at the following URL: http://www.redhat.com/support/errata/rhel/ Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:239 - BehobenRed Hat Enterprise Linux ES version 2.1redhat_csaf
Release notes, driver notes, and driver disks for this update are available at the following URL: http://www.redhat.com/support/errata/rhel/ Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:239 - BehobenRed Hat Enterprise Linux WS version 2.1redhat_csaf
Release notes, driver notes, and driver disks for this update are available at the following URL: http://www.redhat.com/support/errata/rhel/ Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:239
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (1)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- EDB-68Linux Kernel 2.4.20 - 'decode_fh' Denial of Servicefunktional · exploit_db
betroffene Produkte (6)
Betroffene Produkte und Versionsbereiche.
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::as
- Red Hat Enterprise Linux ES version 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::es
- Red Hat Enterprise Linux WS version 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::ws
- Red Hat Linux Advanced Workstation 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::aw
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2003:198Red Hat Security Advisory: kernel security update2003-08-21csaf · redhat_csafUS
Updated kernel packages that address several security vulnerabilites are now available for the IA64 architecture. [Updated 28 August 2003] Changed the CVE name listed in description from the incorrect CAN-2002-0247 to CAN-2003-0247
- RHSA-2003:239Red Hat Security Advisory: kernel security update2003-08-21csaf · redhat_csafUS
Updated kernel packages that address various security vulnerabilities are now available for Red Hat Enterprise Linux.
auch bekannt als (2)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (10)
Externe Belege — Patches, Meldungen, Analysen.
- http://marc.info/?l=bugtraq&m=105950927708272&w=2enisa_euvd
- http://www.debian.org/security/2004/dsa-358enisa_euvd
- http://www.redhat.com/support/errata/RHSA-2003-198.htmlenisa_euvd
- http://www.redhat.com/support/errata/RHSA-2003-239.htmlenisa_euvd
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A386enisa_euvd
- http://marc.info/?l=bugtraq&m=105950927708272&w=2nvd
- http://www.debian.org/security/2004/dsa-358nvd
- http://www.redhat.com/support/errata/RHSA-2003-198.htmlnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan