CVE catalog

CVE-2003-0212

rinetd: CVE-2003-0212

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
2.44% · Oct 25, 2026

handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrinetdsid0.73-3fixed
Debianrinetdforky0.73-3fixed
Debianrinetdtrixie0.73-2fixed
Debianrinetdbookworm0.73-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrinetdsourcesid0.61-2not yet assignedNot reportedNot reported
Debianrinetdsourceforky0.61-2not yet assignedNot reportedNot reported
Debianrinetdsourcetrixie0.61-2not yet assignedNot reportedNot reported
Debianrinetdsourcebookworm0.61-2not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [rinetd]Fixed
    Details (2)
    • 0.73-1 · amd64 · bookworm

      Fixed · Fixed: 0.61-2

      dsa · rinetd · debian · bookworm; dsa · rinetd · debian · 12

    • 0.73-1 · arm64 · bookworm

      Fixed · Fixed: 0.61-2

      dsa · rinetd · debian · bookworm; dsa · rinetd · debian · 12

[Debian 13 (Trixie)]

  • [rinetd]Fixed

    Source package: [rinetd]

    Details (2)
    • 0.73-2 · amd64 · trixie

      Fixed · Fixed: 0.61-2

      dsa · rinetd · debian · 13

    • 0.73-2+b1 · arm64 · trixie

      Fixed · Fixed: 0.61-2

      dsa · rinetd · debian · 13

Observed:

References