CVE catalog

CVE-2003-0855

pan: CVE-2003-0855

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
2.19% · Oct 25, 2026

Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpansid0.165-1fixed
Debianpanforky0.165-1fixed
Debianpantrixie0.162-1fixed
Debianpanbookworm0.154-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpansourcesid0.13.4-1not yet assignedNot reportedNot reported
Debianpansourceforky0.13.4-1not yet assignedNot reportedNot reported
Debianpansourcetrixie0.13.4-1not yet assignedNot reportedNot reported
Debianpansourcebookworm0.13.4-1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [pan]Fixed
    Details (2)
    • 0.154-1 · amd64 · bookworm

      Fixed · Fixed: 0.13.4-1

      dsa · pan · debian · bookworm; dsa · pan · debian · 12

    • 0.154-1 · arm64 · bookworm

      Fixed · Fixed: 0.13.4-1

      dsa · pan · debian · bookworm; dsa · pan · debian · 12

[Debian 13 (Trixie)]

  • [pan]Fixed
    Details (2)
    • 0.162-1 · amd64 · trixie

      Fixed · Fixed: 0.13.4-1

      dsa · pan · debian · 13

    • 0.162-1 · arm64 · trixie

      Fixed · Fixed: 0.13.4-1

      dsa · pan · debian · 13

Observed:

References