CVE-2003-0418

high

Description

The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses.

References

http://www.kb.cert.org/vuls/id/471084

http://marc.info/?l=bugtraq&m=105519179005065&w=2

Details

Source: Mitre, NVD

Published: 2003-07-24

Updated: 2016-10-18

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High