Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2003-0859
Vulnerability from cvelistv5
Published
2003-11-18 05:00
Modified
2024-08-08 02:05
Severity ?
EPSS score ?
Summary
The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T02:05:12.613Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "oval:org.mitre.oval:def:11337",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337"
},
{
"name": "RHSA-2003:325",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-325.html"
},
{
"name": "RHSA-2003:334",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-334.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2003-11-12T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-10T00:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "oval:org.mitre.oval:def:11337",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337"
},
{
"name": "RHSA-2003:325",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-325.html"
},
{
"name": "RHSA-2003:334",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-334.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-0859",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "oval:org.mitre.oval:def:11337",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337"
},
{
"name": "RHSA-2003:325",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-325.html"
},
{
"name": "RHSA-2003:334",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-334.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2003-0859",
"datePublished": "2003-11-18T05:00:00",
"dateReserved": "2003-10-10T00:00:00",
"dateUpdated": "2024-08-08T02:05:12.613Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2003-0859\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2003-12-15T05:00:00.000\",\"lastModified\":\"2024-11-20T23:45:41.577\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n getifaddres en GNU libc (glibc) 2.2.4 y anteriores permite a usuarios locales causar una denegaci\u00f3n de servicio enviando mensajes suplantando a otros usuarios al interfaz del kernel netlink.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":4.9,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.9,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:glibc:2.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CAADC158-B7EF-4135-B383-0DA43065B43E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:zebra:0.91a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4422632-71AE-4E7F-8684-EC63F9B05F50\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:zebra:0.92a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06039EBD-0C90-42C9-B182-9A59A7A3075A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:zebra:0.93a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"01D1D224-8BD6-46AD-AA75-5457A2E007A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:zebra:0.93b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDEEAC68-6442-4E82-B072-491ED94EE6D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:quagga:quagga_routing_software_suite:0.96.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"435E018F-DDB1-4909-B808-A45315AFECE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sgi:propack:2.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8AB7B969-1093-46A9-AA8D-0C28F138C4D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26430687-409B-448F-934B-06AB937DDF63\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*\",\"matchCriteriaId\":\"2641EE56-6F9D-400B-B456-877F4DA79B10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*\",\"matchCriteriaId\":\"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*\",\"matchCriteriaId\":\"E0B458EA-495E-40FA-9379-C03757F7B1EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*\",\"matchCriteriaId\":\"409E324A-C040-494F-A026-9DCAE01C07F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*\",\"matchCriteriaId\":\"1728AB5D-55A9-46B0-A412-6F7263CAEB5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*\",\"matchCriteriaId\":\"6474B775-C893-491F-A074-802AFB1FEDD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*\",\"matchCriteriaId\":\"81B543F9-C209-46C2-B0AE-E14818A6992E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*\",\"matchCriteriaId\":\"EC79FF22-2664-4C40-B0B3-6D23B5F45162\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*\",\"matchCriteriaId\":\"777F9EC0-2919-45CA-BFF8-78A02537C513\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:intel:ia64:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A94B8E3-D6A5-4061-885C-DDA14E00E63A\"}]}]}],\"references\":[{\"url\":\"http://www.redhat.com/support/errata/RHSA-2003-325.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2003-334.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2003-325.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2003-334.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
rhsa-2003:325
Vulnerability from csaf_redhat
Published
2003-11-12 16:19
Modified
2024-11-21 22:53
Summary
Red Hat Security Advisory: : Updated glibc packages provide security and bug fixes
Notes
Topic
Updated glibc packages that resolve vulnerabilities and address several bugs
are now available.
Details
The glibc packages contain GNU libc, which provides standard system libraries.
A bug in the getgrouplist function can cause a buffer overflow if
the size of the group list is too small to hold all the user's groups.
This overflow can cause segmentation faults in user applications, which may
have security implications, depending on the application in question. This
vulnerability exists only when an administrator has placed a user in a
number of groups larger than that expected by an application. Therefore,
there is no risk in instances where users are members of few groups. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2003-0689 to this issue.
Herbert Xu reported that various applications can accept spoofed messages
sent on the kernel netlink interface by other users on the local machine.
This could lead to a local denial of service attack. In Red Hat Linux 9
and later, the glibc function getifaddrs uses netlink and could therefore
be vulnerable to this issue. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2003-0859 to this issue.
In addition to the security issues, a number of other bugs were fixed.
Users are advised to upgrade to these erratum packages, which contain a
patch that checks that netlink messages actually came from the kernel, a
backported security patch for the getgroups list vulnerability, and patches
for the various bug fixes.
[Update 2003-11-13]: The packages for Red Hat Linux 9 have been updated
for compatibility with kernels not provided by Red Hat.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated glibc packages that resolve vulnerabilities and address several bugs\nare now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The glibc packages contain GNU libc, which provides standard system libraries.\n\nA bug in the getgrouplist function can cause a buffer overflow if\nthe size of the group list is too small to hold all the user\u0027s groups.\nThis overflow can cause segmentation faults in user applications, which may\nhave security implications, depending on the application in question. This\nvulnerability exists only when an administrator has placed a user in a\nnumber of groups larger than that expected by an application. Therefore,\nthere is no risk in instances where users are members of few groups. The\nCommon Vulnerabilities and Exposures project (cve.mitre.org) has assigned\nthe name CAN-2003-0689 to this issue.\n\nHerbert Xu reported that various applications can accept spoofed messages\nsent on the kernel netlink interface by other users on the local machine.\nThis could lead to a local denial of service attack. In Red Hat Linux 9\nand later, the glibc function getifaddrs uses netlink and could therefore\nbe vulnerable to this issue. The Common Vulnerabilities and Exposures\nproject (cve.mitre.org) has assigned the name CAN-2003-0859 to this issue.\n\nIn addition to the security issues, a number of other bugs were fixed.\n\nUsers are advised to upgrade to these erratum packages, which contain a\npatch that checks that netlink messages actually came from the kernel, a\nbackported security patch for the getgroups list vulnerability, and patches\nfor the various bug fixes.\n\n[Update 2003-11-13]: The packages for Red Hat Linux 9 have been updated\nfor compatibility with kernels not provided by Red Hat.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2003:325",
"url": "https://access.redhat.com/errata/RHSA-2003:325"
},
{
"category": "external",
"summary": "54697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=54697"
},
{
"category": "external",
"summary": "83973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=83973"
},
{
"category": "external",
"summary": "85994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=85994"
},
{
"category": "external",
"summary": "86032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=86032"
},
{
"category": "external",
"summary": "88409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=88409"
},
{
"category": "external",
"summary": "88456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=88456"
},
{
"category": "external",
"summary": "88978",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=88978"
},
{
"category": "external",
"summary": "89448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=89448"
},
{
"category": "external",
"summary": "90002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90002"
},
{
"category": "external",
"summary": "90036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90036"
},
{
"category": "external",
"summary": "90077",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90077"
},
{
"category": "external",
"summary": "90301",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90301"
},
{
"category": "external",
"summary": "90987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90987"
},
{
"category": "external",
"summary": "91567",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91567"
},
{
"category": "external",
"summary": "97814",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=97814"
},
{
"category": "external",
"summary": "97828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=97828"
},
{
"category": "external",
"summary": "98966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=98966"
},
{
"category": "external",
"summary": "101261",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=101261"
},
{
"category": "external",
"summary": "101691",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=101691"
},
{
"category": "external",
"summary": "102709",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=102709"
},
{
"category": "external",
"summary": "103727",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=103727"
},
{
"category": "external",
"summary": "105348",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=105348"
},
{
"category": "external",
"summary": "107846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=107846"
},
{
"category": "external",
"summary": "108634",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=108634"
},
{
"category": "external",
"summary": "109904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=109904"
},
{
"category": "external",
"summary": "109918",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=109918"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_325.json"
}
],
"title": "Red Hat Security Advisory: : Updated glibc packages provide security and bug fixes",
"tracking": {
"current_release_date": "2024-11-21T22:53:32+00:00",
"generator": {
"date": "2024-11-21T22:53:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2003:325",
"initial_release_date": "2003-11-12T16:19:00+00:00",
"revision_history": [
{
"date": "2003-11-12T16:19:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2003-11-12T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T22:53:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Linux 7.1",
"product": {
"name": "Red Hat Linux 7.1",
"product_id": "Red Hat Linux 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.2",
"product": {
"name": "Red Hat Linux 7.2",
"product_id": "Red Hat Linux 7.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.3",
"product": {
"name": "Red Hat Linux 7.3",
"product_id": "Red Hat Linux 7.3",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 8.0",
"product": {
"name": "Red Hat Linux 8.0",
"product_id": "Red Hat Linux 8.0",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:8.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 9",
"product": {
"name": "Red Hat Linux 9",
"product_id": "Red Hat Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2003-0689",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617066"
}
],
"notes": [
{
"category": "description",
"text": "The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0689"
},
{
"category": "external",
"summary": "RHBZ#1617066",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617066"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0689",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0689"
}
],
"release_date": "2003-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-11-12T16:19:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run the following\ncommand at a shell prompt:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. On the i686\narchitecture, *.i686.rpm packages should be installed where available\nrather than *.i386.rpm.\n\nIf you are unsure which architecture you are on, run the following\ncommand at a shell prompt:\n\nrpm -q --qf \u0027%{arch}\\n\u0027 glibc\n\nOnly those RPMs which are currently installed will be updated. Those RPMs\nwhich are not installed but included in the list will not be updated.\nNote that you can also use wildcards (*.rpm) if your current directory\nonly contains the desired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL Certificate\nErrors, you need to install a version of the up2date client with an updated\ncertificate. The latest version of up2date is available from the Red Hat\nFTP site and may also be downloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:325"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0859",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617097"
}
],
"notes": [
{
"category": "description",
"text": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0859"
},
{
"category": "external",
"summary": "RHBZ#1617097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0859",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0859"
}
],
"release_date": "2003-11-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-11-12T16:19:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run the following\ncommand at a shell prompt:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. On the i686\narchitecture, *.i686.rpm packages should be installed where available\nrather than *.i386.rpm.\n\nIf you are unsure which architecture you are on, run the following\ncommand at a shell prompt:\n\nrpm -q --qf \u0027%{arch}\\n\u0027 glibc\n\nOnly those RPMs which are currently installed will be updated. Those RPMs\nwhich are not installed but included in the list will not be updated.\nNote that you can also use wildcards (*.rpm) if your current directory\nonly contains the desired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL Certificate\nErrors, you need to install a version of the up2date client with an updated\ncertificate. The latest version of up2date is available from the Red Hat\nFTP site and may also be downloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:325"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "security flaw"
}
]
}
rhsa-2003_325
Vulnerability from csaf_redhat
Published
2003-11-12 16:19
Modified
2024-11-21 22:53
Summary
Red Hat Security Advisory: : Updated glibc packages provide security and bug fixes
Notes
Topic
Updated glibc packages that resolve vulnerabilities and address several bugs
are now available.
Details
The glibc packages contain GNU libc, which provides standard system libraries.
A bug in the getgrouplist function can cause a buffer overflow if
the size of the group list is too small to hold all the user's groups.
This overflow can cause segmentation faults in user applications, which may
have security implications, depending on the application in question. This
vulnerability exists only when an administrator has placed a user in a
number of groups larger than that expected by an application. Therefore,
there is no risk in instances where users are members of few groups. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2003-0689 to this issue.
Herbert Xu reported that various applications can accept spoofed messages
sent on the kernel netlink interface by other users on the local machine.
This could lead to a local denial of service attack. In Red Hat Linux 9
and later, the glibc function getifaddrs uses netlink and could therefore
be vulnerable to this issue. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2003-0859 to this issue.
In addition to the security issues, a number of other bugs were fixed.
Users are advised to upgrade to these erratum packages, which contain a
patch that checks that netlink messages actually came from the kernel, a
backported security patch for the getgroups list vulnerability, and patches
for the various bug fixes.
[Update 2003-11-13]: The packages for Red Hat Linux 9 have been updated
for compatibility with kernels not provided by Red Hat.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated glibc packages that resolve vulnerabilities and address several bugs\nare now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The glibc packages contain GNU libc, which provides standard system libraries.\n\nA bug in the getgrouplist function can cause a buffer overflow if\nthe size of the group list is too small to hold all the user\u0027s groups.\nThis overflow can cause segmentation faults in user applications, which may\nhave security implications, depending on the application in question. This\nvulnerability exists only when an administrator has placed a user in a\nnumber of groups larger than that expected by an application. Therefore,\nthere is no risk in instances where users are members of few groups. The\nCommon Vulnerabilities and Exposures project (cve.mitre.org) has assigned\nthe name CAN-2003-0689 to this issue.\n\nHerbert Xu reported that various applications can accept spoofed messages\nsent on the kernel netlink interface by other users on the local machine.\nThis could lead to a local denial of service attack. In Red Hat Linux 9\nand later, the glibc function getifaddrs uses netlink and could therefore\nbe vulnerable to this issue. The Common Vulnerabilities and Exposures\nproject (cve.mitre.org) has assigned the name CAN-2003-0859 to this issue.\n\nIn addition to the security issues, a number of other bugs were fixed.\n\nUsers are advised to upgrade to these erratum packages, which contain a\npatch that checks that netlink messages actually came from the kernel, a\nbackported security patch for the getgroups list vulnerability, and patches\nfor the various bug fixes.\n\n[Update 2003-11-13]: The packages for Red Hat Linux 9 have been updated\nfor compatibility with kernels not provided by Red Hat.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2003:325",
"url": "https://access.redhat.com/errata/RHSA-2003:325"
},
{
"category": "external",
"summary": "54697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=54697"
},
{
"category": "external",
"summary": "83973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=83973"
},
{
"category": "external",
"summary": "85994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=85994"
},
{
"category": "external",
"summary": "86032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=86032"
},
{
"category": "external",
"summary": "88409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=88409"
},
{
"category": "external",
"summary": "88456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=88456"
},
{
"category": "external",
"summary": "88978",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=88978"
},
{
"category": "external",
"summary": "89448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=89448"
},
{
"category": "external",
"summary": "90002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90002"
},
{
"category": "external",
"summary": "90036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90036"
},
{
"category": "external",
"summary": "90077",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90077"
},
{
"category": "external",
"summary": "90301",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90301"
},
{
"category": "external",
"summary": "90987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90987"
},
{
"category": "external",
"summary": "91567",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91567"
},
{
"category": "external",
"summary": "97814",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=97814"
},
{
"category": "external",
"summary": "97828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=97828"
},
{
"category": "external",
"summary": "98966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=98966"
},
{
"category": "external",
"summary": "101261",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=101261"
},
{
"category": "external",
"summary": "101691",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=101691"
},
{
"category": "external",
"summary": "102709",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=102709"
},
{
"category": "external",
"summary": "103727",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=103727"
},
{
"category": "external",
"summary": "105348",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=105348"
},
{
"category": "external",
"summary": "107846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=107846"
},
{
"category": "external",
"summary": "108634",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=108634"
},
{
"category": "external",
"summary": "109904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=109904"
},
{
"category": "external",
"summary": "109918",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=109918"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_325.json"
}
],
"title": "Red Hat Security Advisory: : Updated glibc packages provide security and bug fixes",
"tracking": {
"current_release_date": "2024-11-21T22:53:32+00:00",
"generator": {
"date": "2024-11-21T22:53:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2003:325",
"initial_release_date": "2003-11-12T16:19:00+00:00",
"revision_history": [
{
"date": "2003-11-12T16:19:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2003-11-12T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T22:53:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Linux 7.1",
"product": {
"name": "Red Hat Linux 7.1",
"product_id": "Red Hat Linux 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.2",
"product": {
"name": "Red Hat Linux 7.2",
"product_id": "Red Hat Linux 7.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.3",
"product": {
"name": "Red Hat Linux 7.3",
"product_id": "Red Hat Linux 7.3",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 8.0",
"product": {
"name": "Red Hat Linux 8.0",
"product_id": "Red Hat Linux 8.0",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:8.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 9",
"product": {
"name": "Red Hat Linux 9",
"product_id": "Red Hat Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2003-0689",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617066"
}
],
"notes": [
{
"category": "description",
"text": "The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0689"
},
{
"category": "external",
"summary": "RHBZ#1617066",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617066"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0689",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0689"
}
],
"release_date": "2003-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-11-12T16:19:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run the following\ncommand at a shell prompt:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. On the i686\narchitecture, *.i686.rpm packages should be installed where available\nrather than *.i386.rpm.\n\nIf you are unsure which architecture you are on, run the following\ncommand at a shell prompt:\n\nrpm -q --qf \u0027%{arch}\\n\u0027 glibc\n\nOnly those RPMs which are currently installed will be updated. Those RPMs\nwhich are not installed but included in the list will not be updated.\nNote that you can also use wildcards (*.rpm) if your current directory\nonly contains the desired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL Certificate\nErrors, you need to install a version of the up2date client with an updated\ncertificate. The latest version of up2date is available from the Red Hat\nFTP site and may also be downloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:325"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0859",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617097"
}
],
"notes": [
{
"category": "description",
"text": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0859"
},
{
"category": "external",
"summary": "RHBZ#1617097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0859",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0859"
}
],
"release_date": "2003-11-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-11-12T16:19:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run the following\ncommand at a shell prompt:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. On the i686\narchitecture, *.i686.rpm packages should be installed where available\nrather than *.i386.rpm.\n\nIf you are unsure which architecture you are on, run the following\ncommand at a shell prompt:\n\nrpm -q --qf \u0027%{arch}\\n\u0027 glibc\n\nOnly those RPMs which are currently installed will be updated. Those RPMs\nwhich are not installed but included in the list will not be updated.\nNote that you can also use wildcards (*.rpm) if your current directory\nonly contains the desired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL Certificate\nErrors, you need to install a version of the up2date client with an updated\ncertificate. The latest version of up2date is available from the Red Hat\nFTP site and may also be downloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:325"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "security flaw"
}
]
}
RHSA-2003:325
Vulnerability from csaf_redhat
Published
2003-11-12 16:19
Modified
2024-11-21 22:53
Summary
Red Hat Security Advisory: : Updated glibc packages provide security and bug fixes
Notes
Topic
Updated glibc packages that resolve vulnerabilities and address several bugs
are now available.
Details
The glibc packages contain GNU libc, which provides standard system libraries.
A bug in the getgrouplist function can cause a buffer overflow if
the size of the group list is too small to hold all the user's groups.
This overflow can cause segmentation faults in user applications, which may
have security implications, depending on the application in question. This
vulnerability exists only when an administrator has placed a user in a
number of groups larger than that expected by an application. Therefore,
there is no risk in instances where users are members of few groups. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2003-0689 to this issue.
Herbert Xu reported that various applications can accept spoofed messages
sent on the kernel netlink interface by other users on the local machine.
This could lead to a local denial of service attack. In Red Hat Linux 9
and later, the glibc function getifaddrs uses netlink and could therefore
be vulnerable to this issue. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2003-0859 to this issue.
In addition to the security issues, a number of other bugs were fixed.
Users are advised to upgrade to these erratum packages, which contain a
patch that checks that netlink messages actually came from the kernel, a
backported security patch for the getgroups list vulnerability, and patches
for the various bug fixes.
[Update 2003-11-13]: The packages for Red Hat Linux 9 have been updated
for compatibility with kernels not provided by Red Hat.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated glibc packages that resolve vulnerabilities and address several bugs\nare now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The glibc packages contain GNU libc, which provides standard system libraries.\n\nA bug in the getgrouplist function can cause a buffer overflow if\nthe size of the group list is too small to hold all the user\u0027s groups.\nThis overflow can cause segmentation faults in user applications, which may\nhave security implications, depending on the application in question. This\nvulnerability exists only when an administrator has placed a user in a\nnumber of groups larger than that expected by an application. Therefore,\nthere is no risk in instances where users are members of few groups. The\nCommon Vulnerabilities and Exposures project (cve.mitre.org) has assigned\nthe name CAN-2003-0689 to this issue.\n\nHerbert Xu reported that various applications can accept spoofed messages\nsent on the kernel netlink interface by other users on the local machine.\nThis could lead to a local denial of service attack. In Red Hat Linux 9\nand later, the glibc function getifaddrs uses netlink and could therefore\nbe vulnerable to this issue. The Common Vulnerabilities and Exposures\nproject (cve.mitre.org) has assigned the name CAN-2003-0859 to this issue.\n\nIn addition to the security issues, a number of other bugs were fixed.\n\nUsers are advised to upgrade to these erratum packages, which contain a\npatch that checks that netlink messages actually came from the kernel, a\nbackported security patch for the getgroups list vulnerability, and patches\nfor the various bug fixes.\n\n[Update 2003-11-13]: The packages for Red Hat Linux 9 have been updated\nfor compatibility with kernels not provided by Red Hat.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2003:325",
"url": "https://access.redhat.com/errata/RHSA-2003:325"
},
{
"category": "external",
"summary": "54697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=54697"
},
{
"category": "external",
"summary": "83973",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=83973"
},
{
"category": "external",
"summary": "85994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=85994"
},
{
"category": "external",
"summary": "86032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=86032"
},
{
"category": "external",
"summary": "88409",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=88409"
},
{
"category": "external",
"summary": "88456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=88456"
},
{
"category": "external",
"summary": "88978",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=88978"
},
{
"category": "external",
"summary": "89448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=89448"
},
{
"category": "external",
"summary": "90002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90002"
},
{
"category": "external",
"summary": "90036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90036"
},
{
"category": "external",
"summary": "90077",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90077"
},
{
"category": "external",
"summary": "90301",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90301"
},
{
"category": "external",
"summary": "90987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=90987"
},
{
"category": "external",
"summary": "91567",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=91567"
},
{
"category": "external",
"summary": "97814",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=97814"
},
{
"category": "external",
"summary": "97828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=97828"
},
{
"category": "external",
"summary": "98966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=98966"
},
{
"category": "external",
"summary": "101261",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=101261"
},
{
"category": "external",
"summary": "101691",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=101691"
},
{
"category": "external",
"summary": "102709",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=102709"
},
{
"category": "external",
"summary": "103727",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=103727"
},
{
"category": "external",
"summary": "105348",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=105348"
},
{
"category": "external",
"summary": "107846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=107846"
},
{
"category": "external",
"summary": "108634",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=108634"
},
{
"category": "external",
"summary": "109904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=109904"
},
{
"category": "external",
"summary": "109918",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=109918"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_325.json"
}
],
"title": "Red Hat Security Advisory: : Updated glibc packages provide security and bug fixes",
"tracking": {
"current_release_date": "2024-11-21T22:53:32+00:00",
"generator": {
"date": "2024-11-21T22:53:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2003:325",
"initial_release_date": "2003-11-12T16:19:00+00:00",
"revision_history": [
{
"date": "2003-11-12T16:19:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2003-11-12T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T22:53:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Linux 7.1",
"product": {
"name": "Red Hat Linux 7.1",
"product_id": "Red Hat Linux 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.2",
"product": {
"name": "Red Hat Linux 7.2",
"product_id": "Red Hat Linux 7.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.3",
"product": {
"name": "Red Hat Linux 7.3",
"product_id": "Red Hat Linux 7.3",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 8.0",
"product": {
"name": "Red Hat Linux 8.0",
"product_id": "Red Hat Linux 8.0",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:8.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 9",
"product": {
"name": "Red Hat Linux 9",
"product_id": "Red Hat Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2003-0689",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617066"
}
],
"notes": [
{
"category": "description",
"text": "The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0689"
},
{
"category": "external",
"summary": "RHBZ#1617066",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617066"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0689",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0689"
}
],
"release_date": "2003-04-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-11-12T16:19:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run the following\ncommand at a shell prompt:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. On the i686\narchitecture, *.i686.rpm packages should be installed where available\nrather than *.i386.rpm.\n\nIf you are unsure which architecture you are on, run the following\ncommand at a shell prompt:\n\nrpm -q --qf \u0027%{arch}\\n\u0027 glibc\n\nOnly those RPMs which are currently installed will be updated. Those RPMs\nwhich are not installed but included in the list will not be updated.\nNote that you can also use wildcards (*.rpm) if your current directory\nonly contains the desired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL Certificate\nErrors, you need to install a version of the up2date client with an updated\ncertificate. The latest version of up2date is available from the Red Hat\nFTP site and may also be downloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:325"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2003-0859",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617097"
}
],
"notes": [
{
"category": "description",
"text": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2003-0859"
},
{
"category": "external",
"summary": "RHBZ#1617097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2003-0859",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2003-0859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0859"
}
],
"release_date": "2003-11-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2003-11-12T16:19:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run the following\ncommand at a shell prompt:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. On the i686\narchitecture, *.i686.rpm packages should be installed where available\nrather than *.i386.rpm.\n\nIf you are unsure which architecture you are on, run the following\ncommand at a shell prompt:\n\nrpm -q --qf \u0027%{arch}\\n\u0027 glibc\n\nOnly those RPMs which are currently installed will be updated. Those RPMs\nwhich are not installed but included in the list will not be updated.\nNote that you can also use wildcards (*.rpm) if your current directory\nonly contains the desired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nIf up2date fails to connect to Red Hat Network due to SSL Certificate\nErrors, you need to install a version of the up2date client with an updated\ncertificate. The latest version of up2date is available from the Red Hat\nFTP site and may also be downloaded directly from the RHN website:\n\nhttps://rhn.redhat.com/help/latest-up2date.pxt",
"product_ids": [
"Red Hat Linux 7.1",
"Red Hat Linux 7.2",
"Red Hat Linux 7.3",
"Red Hat Linux 8.0",
"Red Hat Linux 9"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2003:325"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "security flaw"
}
]
}
gsd-2003-0859
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2003-0859",
"description": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.",
"id": "GSD-2003-0859",
"references": [
"https://access.redhat.com/errata/RHSA-2003:334",
"https://access.redhat.com/errata/RHSA-2003:325"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2003-0859"
],
"details": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.",
"id": "GSD-2003-0859",
"modified": "2023-12-13T01:22:12.793262Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-0859",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "oval:org.mitre.oval:def:11337",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337"
},
{
"name": "RHSA-2003:325",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-325.html"
},
{
"name": "RHSA-2003:334",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-334.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:gnu:zebra:0.93b:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:quagga:quagga_routing_software_suite:0.96.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:sgi:propack:2.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:zebra:0.92a:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:zebra:0.93a:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:glibc:2.3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:zebra:0.91a:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:intel:ia64:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-0859"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2003:325",
"refsource": "REDHAT",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-325.html"
},
{
"name": "RHSA-2003:334",
"refsource": "REDHAT",
"tags": [],
"url": "http://www.redhat.com/support/errata/RHSA-2003-334.html"
},
{
"name": "oval:org.mitre.oval:def:11337",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2017-10-11T01:29Z",
"publishedDate": "2003-12-15T05:00Z"
}
}
}
ghsa-844m-mj4w-qff2
Vulnerability from github
Published
2022-04-29 01:27
Modified
2022-04-29 01:27
Details
The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
{
"affected": [],
"aliases": [
"CVE-2003-0859"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2003-12-15T05:00:00Z",
"severity": "MODERATE"
},
"details": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.",
"id": "GHSA-844m-mj4w-qff2",
"modified": "2022-04-29T01:27:07Z",
"published": "2022-04-29T01:27:07Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0859"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2003-325.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2003-334.html"
}
],
"schema_version": "1.4.0",
"severity": []
}
fkie_cve-2003-0859
Vulnerability from fkie_nvd
Published
2003-12-15 05:00
Modified
2024-11-20 23:45
Severity ?
Summary
The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| gnu | glibc | 2.3.2 | |
| gnu | zebra | 0.91a | |
| gnu | zebra | 0.92a | |
| gnu | zebra | 0.93a | |
| gnu | zebra | 0.93b | |
| quagga | quagga_routing_software_suite | 0.96.2 | |
| sgi | propack | 2.2.1 | |
| sgi | propack | 2.3 | |
| redhat | enterprise_linux | 2.1 | |
| redhat | enterprise_linux | 2.1 | |
| redhat | enterprise_linux | 2.1 | |
| redhat | enterprise_linux | 2.1 | |
| redhat | enterprise_linux | 2.1 | |
| redhat | enterprise_linux | 2.1 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | linux_advanced_workstation | 2.1 | |
| intel | ia64 | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:glibc:2.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "CAADC158-B7EF-4135-B383-0DA43065B43E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnu:zebra:0.91a:*:*:*:*:*:*:*",
"matchCriteriaId": "B4422632-71AE-4E7F-8684-EC63F9B05F50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnu:zebra:0.92a:*:*:*:*:*:*:*",
"matchCriteriaId": "06039EBD-0C90-42C9-B182-9A59A7A3075A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnu:zebra:0.93a:*:*:*:*:*:*:*",
"matchCriteriaId": "01D1D224-8BD6-46AD-AA75-5457A2E007A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnu:zebra:0.93b:*:*:*:*:*:*:*",
"matchCriteriaId": "FDEEAC68-6442-4E82-B072-491ED94EE6D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:quagga:quagga_routing_software_suite:0.96.2:*:*:*:*:*:*:*",
"matchCriteriaId": "435E018F-DDB1-4909-B808-A45315AFECE8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sgi:propack:2.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8AB7B969-1093-46A9-AA8D-0C28F138C4D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "26430687-409B-448F-934B-06AB937DDF63",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*",
"matchCriteriaId": "2641EE56-6F9D-400B-B456-877F4DA79B10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*",
"matchCriteriaId": "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*",
"matchCriteriaId": "E0B458EA-495E-40FA-9379-C03757F7B1EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*",
"matchCriteriaId": "409E324A-C040-494F-A026-9DCAE01C07F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*",
"matchCriteriaId": "1728AB5D-55A9-46B0-A412-6F7263CAEB5A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*",
"matchCriteriaId": "6474B775-C893-491F-A074-802AFB1FEDD8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*",
"matchCriteriaId": "81B543F9-C209-46C2-B0AE-E14818A6992E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
"matchCriteriaId": "EC79FF22-2664-4C40-B0B3-6D23B5F45162",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*",
"matchCriteriaId": "777F9EC0-2919-45CA-BFF8-78A02537C513",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:ia64:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9A94B8E3-D6A5-4061-885C-DDA14E00E63A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface."
},
{
"lang": "es",
"value": "La funci\u00f3n getifaddres en GNU libc (glibc) 2.2.4 y anteriores permite a usuarios locales causar una denegaci\u00f3n de servicio enviando mensajes suplantando a otros usuarios al interfaz del kernel netlink."
}
],
"id": "CVE-2003-0859",
"lastModified": "2024-11-20T23:45:41.577",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2003-12-15T05:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-325.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.redhat.com/support/errata/RHSA-2003-334.html"
},
{
"source": "cve@mitre.org",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-325.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2003-334.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
var-200312-0226
Vulnerability from variot
The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface. Applications which make use of the kernel Netlink interface are said to be prone to denial of service attacks. It has been reported that applications implementing the getifaddrs() glibc function may be prone to denial of service attacks. The problem is said to occur due to the way getifaddrs() interacts with the netlink device. Under some circumstances, an anonymous netlink message handled by the getifaddrs() function may cause the application to crash. Red Hat has stated that GNU Zebra, Quagga and iproute are also affected by this vulnerability due to the way they interact with the netlink interface; exploitation may result in a denial of service. The precise technical details regarding this issue are currently unknown. This BID will be updated, as further information is made available. kernel Netlink is a network interface implementation
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200312-0226",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "enterprise linux",
"scope": "eq",
"trust": 1.6,
"vendor": "redhat",
"version": "2.1"
},
{
"model": "propack",
"scope": "eq",
"trust": 1.3,
"vendor": "sgi",
"version": "2.3"
},
{
"model": "propack",
"scope": "eq",
"trust": 1.3,
"vendor": "sgi",
"version": "2.2.1"
},
{
"model": "routing software suite",
"scope": "eq",
"trust": 1.3,
"vendor": "quagga",
"version": "0.96.2"
},
{
"model": "glibc",
"scope": "eq",
"trust": 1.3,
"vendor": "gnu",
"version": "2.3.2"
},
{
"model": "zebra",
"scope": "eq",
"trust": 1.0,
"vendor": "gnu",
"version": "0.92a"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "3.0"
},
{
"model": "zebra",
"scope": "eq",
"trust": 1.0,
"vendor": "gnu",
"version": "0.93b"
},
{
"model": "zebra",
"scope": "eq",
"trust": 1.0,
"vendor": "gnu",
"version": "0.93a"
},
{
"model": "zebra",
"scope": "eq",
"trust": 1.0,
"vendor": "gnu",
"version": "0.91a"
},
{
"model": "linux advanced workstation",
"scope": "eq",
"trust": 1.0,
"vendor": "redhat",
"version": "2.1"
},
{
"model": "ia64",
"scope": "eq",
"trust": 1.0,
"vendor": "intel",
"version": "*"
},
{
"model": "turbolinux server",
"scope": "eq",
"trust": 0.8,
"vendor": "turbo linux",
"version": "7"
},
{
"model": "turbolinux server",
"scope": "eq",
"trust": 0.8,
"vendor": "turbo linux",
"version": "8"
},
{
"model": "linux",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "9"
},
{
"model": "enterprise linux ws ia64",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "2.1"
},
{
"model": "enterprise linux ws",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "2.1"
},
{
"model": "enterprise linux es",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "3"
},
{
"model": "enterprise linux es ia64",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "2.1"
},
{
"model": "enterprise linux es",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "2.1"
},
{
"model": "enterprise linux as",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "3"
},
{
"model": "enterprise linux as ia64",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "2.1"
},
{
"model": "enterprise linux as",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "2.1"
},
{
"model": "advanced workstation for the itanium processor",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "2.1"
},
{
"model": "zebra b",
"scope": "eq",
"trust": 0.3,
"vendor": "gnu",
"version": "0.93"
},
{
"model": "zebra a",
"scope": "eq",
"trust": 0.3,
"vendor": "gnu",
"version": "0.93"
},
{
"model": "zebra a",
"scope": "eq",
"trust": 0.3,
"vendor": "gnu",
"version": "0.92"
},
{
"model": "zebra a",
"scope": "eq",
"trust": 0.3,
"vendor": "gnu",
"version": "0.91"
},
{
"model": "glibc",
"scope": "eq",
"trust": 0.3,
"vendor": "gnu",
"version": "2.2.4"
}
],
"sources": [
{
"db": "BID",
"id": "9027"
},
{
"db": "JVNDB",
"id": "JVNDB-2003-000341"
},
{
"db": "CNNVD",
"id": "CNNVD-200312-059"
},
{
"db": "NVD",
"id": "CVE-2003-0859"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:turbolinux:turbolinux_server",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:linux",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2003-000341"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Red Hat Security Advisory",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200312-059"
}
],
"trust": 0.6
},
"cve": "CVE-2003-0859",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2003-0859",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "VHN-7684",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2003-0859",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2003-0859",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-200312-059",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-7684",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-7684"
},
{
"db": "JVNDB",
"id": "JVNDB-2003-000341"
},
{
"db": "CNNVD",
"id": "CNNVD-200312-059"
},
{
"db": "NVD",
"id": "CVE-2003-0859"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface. Applications which make use of the kernel Netlink interface are said to be prone to denial of service attacks. \nIt has been reported that applications implementing the getifaddrs() glibc function may be prone to denial of service attacks. The problem is said to occur due to the way getifaddrs() interacts with the netlink device. Under some circumstances, an anonymous netlink message handled by the getifaddrs() function may cause the application to crash. \nRed Hat has stated that GNU Zebra, Quagga and iproute are also affected by this vulnerability due to the way they interact with the netlink interface; exploitation may result in a denial of service. \nThe precise technical details regarding this issue are currently unknown. This BID will be updated, as further information is made available. kernel Netlink is a network interface implementation",
"sources": [
{
"db": "NVD",
"id": "CVE-2003-0859"
},
{
"db": "JVNDB",
"id": "JVNDB-2003-000341"
},
{
"db": "BID",
"id": "9027"
},
{
"db": "VULHUB",
"id": "VHN-7684"
}
],
"trust": 1.98
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2003-0859",
"trust": 2.8
},
{
"db": "BID",
"id": "9027",
"trust": 1.2
},
{
"db": "JVNDB",
"id": "JVNDB-2003-000341",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200312-059",
"trust": 0.7
},
{
"db": "OVAL",
"id": "OVAL:ORG.MITRE.OVAL:DEF:11337",
"trust": 0.6
},
{
"db": "REDHAT",
"id": "RHSA-2003:334",
"trust": 0.6
},
{
"db": "REDHAT",
"id": "RHSA-2003:325",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-7684",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-7684"
},
{
"db": "BID",
"id": "9027"
},
{
"db": "JVNDB",
"id": "JVNDB-2003-000341"
},
{
"db": "CNNVD",
"id": "CNNVD-200312-059"
},
{
"db": "NVD",
"id": "CVE-2003-0859"
}
]
},
"id": "VAR-200312-0226",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-7684"
}
],
"trust": 0.01
},
"last_update_date": "2024-08-14T14:59:26.909000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "RHSA-2003:325",
"trust": 0.8,
"url": "https://rhn.redhat.com/errata/RHSA-2003-325.html"
},
{
"title": "TLSA-2003-66",
"trust": 0.8,
"url": "http://www.turbolinux.com/security/2003/TLSA-2003-66.txt"
},
{
"title": "RHSA-2003:325",
"trust": 0.8,
"url": "http://www.jp.redhat.com/support/errata/RHSA/RHSA-2003-325J.html"
},
{
"title": "TLSA-2003-66",
"trust": 0.8,
"url": "http://www.turbolinux.co.jp/security/2003/TLSA-2003-66j.txt"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2003-000341"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2003-0859"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.redhat.com/support/errata/rhsa-2003-325.html"
},
{
"trust": 1.7,
"url": "http://www.redhat.com/support/errata/rhsa-2003-334.html"
},
{
"trust": 1.1,
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a11337"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2003-0859"
},
{
"trust": 0.8,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2003-0859"
},
{
"trust": 0.8,
"url": "http://www.securityfocus.com/bid/9027"
},
{
"trust": 0.6,
"url": "http://oval.mitre.org/repository/data/getdef?id=oval:org.mitre.oval:def:11337"
},
{
"trust": 0.3,
"url": "http://distro.conectiva.com.br/atualizacoes/index.php?id=a\u0026anuncio=000789"
},
{
"trust": 0.3,
"url": "http://archives.neohapsis.com/archives/vendor/2004-q1/0011.html"
},
{
"trust": 0.3,
"url": "http://www.quagga.net/"
},
{
"trust": 0.3,
"url": "http://rhn.redhat.com/errata/rhsa-2003-315.html"
},
{
"trust": 0.3,
"url": "http://rhn.redhat.com/errata/rhsa-2003-317.html "
},
{
"trust": 0.3,
"url": "http://rhn.redhat.com/errata/rhsa-2003-305.html"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-7684"
},
{
"db": "BID",
"id": "9027"
},
{
"db": "JVNDB",
"id": "JVNDB-2003-000341"
},
{
"db": "CNNVD",
"id": "CNNVD-200312-059"
},
{
"db": "NVD",
"id": "CVE-2003-0859"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-7684"
},
{
"db": "BID",
"id": "9027"
},
{
"db": "JVNDB",
"id": "JVNDB-2003-000341"
},
{
"db": "CNNVD",
"id": "CNNVD-200312-059"
},
{
"db": "NVD",
"id": "CVE-2003-0859"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2003-12-15T00:00:00",
"db": "VULHUB",
"id": "VHN-7684"
},
{
"date": "2003-11-12T00:00:00",
"db": "BID",
"id": "9027"
},
{
"date": "2007-04-01T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2003-000341"
},
{
"date": "2003-11-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200312-059"
},
{
"date": "2003-12-15T05:00:00",
"db": "NVD",
"id": "CVE-2003-0859"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-10-11T00:00:00",
"db": "VULHUB",
"id": "VHN-7684"
},
{
"date": "2009-07-12T00:56:00",
"db": "BID",
"id": "9027"
},
{
"date": "2007-04-01T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2003-000341"
},
{
"date": "2005-12-05T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200312-059"
},
{
"date": "2017-10-11T01:29:15.667000",
"db": "NVD",
"id": "CVE-2003-0859"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "9027"
},
{
"db": "CNNVD",
"id": "CNNVD-200312-059"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "GNU libc of getifaddrs() Service disruption in functions (DoS) Vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2003-000341"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200312-059"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.