CVE catalog

CVE-2003-0619

linux-kernel-2.4.18 - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
10.88% · Oct 25, 2026

Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call. security flaw

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankernel-source-2.4.183.02.4.18-11fixed
Debiankernel-image-2.4.18-1-i3863.02.4.18-9fixed
Debiankernel-image-2.4.18-i386bf3.02.4.18-5vulnerable
Debiankernel-image-2.4.18-i386bf3.02.4.18-5woody2fixed
Debiankernel-image-2.4.18-1-alpha3.02.4.18-8fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankernel-source-2.4.18deb3.02.4.18-11Not reportedDSA-358-1Not reported
Debiankernel-image-2.4.18-1-i386deb3.02.4.18-9Not reportedDSA-358-1Not reported
Debiankernel-image-2.4.18-i386bfdeb3.02.4.18-5woody2Not reportedDSA-358-1Not reported
Debiankernel-image-2.4.18-1-alphadeb3.02.4.18-8Not reportedDSA-358-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References