CVE catalog

CVE-2003-0985

linux-kernel-2.4.18 - missing boundary check

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.23% · Oct 25, 2026

The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077. security flaw

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankernel-patch-2.4.17-mips3.02.4.17-0.020226.2.woody3fixed
Debiankernel-image-2.4.17-hppa3.032.3fixed
Debiankernel-image-2.4.16-lart3.02.4.16-20040204fixed
Debiankernel-image-2.4.16-netwinder3.02.4.16-20040204fixed
Debiankernel-image-2.4.16-riscpc3.02.4.16-20040204fixed
Debiankernel-patch-2.4.16-arm3.020040204fixed
Debiankernel-image-2.4.17-ia643.0kernel-image-2.4.17-ia64fixed
Debiankernel-source-2.4.193.02.4.19-0.020911.1.woody3fixed
Debiankernel-patch-2.4.19-mips3.02.4.19-0.020911.1.woody4vulnerable
Debiankernel-patch-2.4.19-mips3.02.4.19-0.020911.1.woody5vulnerable
Debiankernel-patch-2.4.19-mips3.02.4.19-4.woody1fixed
Debiankernel-patch-2.4.17-s3903.00.0.20020816-0.woody.2fixed
Debiankernel-image-2.4.17-s3903.02.4.17-2.woody.3fixed
Debiankernel-image-2.4.18-hppa3.062.1fixed
Debiankernel-source-2.4.183.02.4.18-14.1fixed
Debiankernel-image-2.4.18-1-i3863.02.4.18-12.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankernel-patch-2.4.17-mipsdeb3.02.4.17-0.020226.2.woody3Not reportedDSA-427Not reported
Debiankernel-image-2.4.17-hppadeb3.032.3Not reportedDSA-470Not reported
Debiankernel-image-2.4.16-lartdeb3.02.4.16-20040204Not reportedDSA-439Not reported
Debiankernel-image-2.4.16-netwinderdeb3.02.4.16-20040204Not reportedDSA-439Not reported
Debiankernel-image-2.4.16-riscpcdeb3.02.4.16-20040204Not reportedDSA-439Not reported
Debiankernel-patch-2.4.16-armdeb3.020040204Not reportedDSA-439Not reported
Debiankernel-image-2.4.17-ia64deb3.0kernel-image-2.4.17-ia64Not reportedDSA-423Not reported
Debiankernel-source-2.4.19deb3.02.4.19-0.020911.1.woody3Not reportedDSA-450Not reported
Debiankernel-patch-2.4.19-mipsdeb3.02.4.19-4.woody1Not reportedDSA-450Not reported
Debiankernel-patch-2.4.17-s390deb3.00.0.20020816-0.woody.2Not reportedDSA-442Not reported
Debiankernel-image-2.4.17-s390deb3.02.4.17-2.woody.3Not reportedDSA-442Not reported
Debiankernel-image-2.4.18-hppadeb3.062.1Not reportedDSA-475Not reported
Debiankernel-source-2.4.18deb3.02.4.18-14.1Not reportedDSA-413Not reported
Debiankernel-image-2.4.18-1-i386deb3.02.4.18-12.1Not reportedDSA-413Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]