Main Vulnerability Database Vulnerabilities #VU95775

Information exposure in Linux kernel - CVE-2003-0001

Published: January 17, 2003 / Updated: August 10, 2024

Vulnerability identifier: #VU95775

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2003-0001

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

Affected software

Linux kernel

How to mitigate CVE-2003-0001

Install update from vendor's repository.

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins

Information exposure in Linux kernel