CVE catalog
CVE-2003-0961
kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18 - local root exploit
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 3.92% · Oct 27, 2026
Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges. security flaw
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | kernel-patch-2.4.17-mips | 3.0 | 2.4.17-0.020226.2.woody4 | fixed |
| Debian | kernel-source-2.4.17 | 3.0 | 2.4.17-1woody3 | vulnerable |
| Debian | kernel-source-2.4.17 | 3.0 | 2.4.17-1woody4 | vulnerable |
| Debian | kernel-source-2.4.17 | 3.0 | 2.4.17-4 | fixed |
| Debian | kernel-patch-2.4.17-apus | 3.0 | 2.4.17-4 | fixed |
| Debian | kernel-patch-2.4.18-powerpc | 3.0 | 2.4.18-1woody3 | fixed |
| Debian | kernel-image-2.4.18-1-alpha | 3.0 | 2.4.18-12 | fixed |
| Debian | kernel-image-2.4.18-1-alpha | 3.0 | 2.4.18-11 | fixed |
| Debian | kernel-image-2.4.18-1-i386 | 3.0 | 2.4.18-12 | fixed |
| Debian | kernel-source-2.4.18 | 3.0 | 2.4.18-14 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | kernel-patch-2.4.17-mips | deb | 3.0 | 2.4.17-0.020226.2.woody4 | Not reported | DSA-433 | Not reported |
| Debian | kernel-source-2.4.17 | deb | 3.0 | 2.4.17-4 | Not reported | DSA-440 | Not reported |
| Debian | kernel-patch-2.4.17-apus | deb | 3.0 | 2.4.17-4 | Not reported | DSA-440 | Not reported |
| Debian | kernel-patch-2.4.18-powerpc | deb | 3.0 | 2.4.18-1woody3 | Not reported | DSA-417 | Not reported |
| Debian | kernel-image-2.4.18-1-alpha | deb | 3.0 | 2.4.18-12 | Not reported | DSA-417 | Not reported |
| Debian | kernel-image-2.4.18-1-alpha | deb | 3.0 | 2.4.18-11 | Not reported | DSA-403 | Not reported |
| Debian | kernel-image-2.4.18-1-i386 | deb | 3.0 | 2.4.18-12 | Not reported | DSA-403 | Not reported |
| Debian | kernel-source-2.4.18 | deb | 3.0 | 2.4.18-14 | Not reported | DSA-403 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://osv.dev/vulnerability/DSA-403]
- [https://osv.dev/vulnerability/DSA-417]
- [https://osv.dev/vulnerability/DSA-433]
- [https://osv.dev/vulnerability/DSA-440]
- [https://security.access.redhat.com/data/csaf/v2/vex/2003/cve-2003-0961.json]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]