5
CVE-2003-0465
- EPSS 1.86%
- Veröffentlicht 18.08.2003 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:02:15
- Erkennungen
LoginThe kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version 2.4.0
Linux ≫ Linux Kernel Version 2.5.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.86% | 0.765 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://marc.info/?l=linux-kernel&m=105796021120436&w=2
http://marc.info/?l=linux-kernel&m=105796415223490&w=2
http://www.redhat.com/support/errata/RHSA-2004-188.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10285