Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2003-0643: Linux kernel socket filter can crash system
CVE-2003-0643 · published 23 years ago
Summary
The core of the Linux operating system (versions 2.4.3‑pre3 through 2.4.22‑pre10) has a coding mistake in its network filtering code. This mistake can be triggered by a remote user to make the system stop working and restart. Apply the kernel updates provided by your Linux distribution or upgrade to a newer, supported version to prevent the crash.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel |
2.4.2 2.4.3 2.4.4 2.4.5 2.4.6 2.4.7 2.4.8 2.4.9 2.4.10 2.4.11 2.4.12 2.4.13 9 more version ranges
cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:* |
Original advisory text
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
References
- http://ftp.belnet.be/linux/gentoo-portage/sys-kernel/gentoo-sources/files/gentoo...
- http://gentoo.kems.net/gentoo-x86-portage/sys-kernel/gentoo-sources/ChangeLog
- http://mirror.clarkson.edu/pub/distributions/gentoo-portage/sys-kernel/wolk-sour...
- http://secunia.com/advisories/23265
- http://www.ultramonkey.org/bugs/cve-patch/CAN-2003-0643.patch
- http://www.ultramonkey.org/bugs/cve/CAN-2003-0643.shtml
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
2.1
Low
Timeline
Published25 Jul 2003
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2003-0643 · NVD
Track software like this
Free during beta