Main Vulnerability Database Vulnerabilities #VU110131

Input validation error in GNU C Library (glibc) - CVE-2003-0028

Published: January 21, 2020 / Updated: June 3, 2025

Vulnerability identifier: #VU110131

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2003-0028

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

Affected software

GNU C Library (glibc)

How to mitigate CVE-2003-0028

Install update from vendor's website.

External References

Related Security Bulletins