Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

CVE-2003-0643: Linux kernel socket filter can crash system

CVE-2003-0643 · published 23 years ago
Summary

The core of the Linux operating system (versions 2.4.3‑pre3 through 2.4.22‑pre10) has a coding mistake in its network filtering code. This mistake can be triggered by a remote user to make the system stop working and restart. Apply the kernel updates provided by your Linux distribution or upgrade to a newer, supported version to prevent the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
linux linux_kernel 2.4.2
2.4.3
2.4.4
2.4.5
2.4.6
2.4.7
2.4.8
2.4.9
2.4.10
2.4.11
2.4.12
2.4.13
9 more version ranges
cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*
Original advisory text
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Timeline
Published25 Jul 2003
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2003-0643 · NVD
Track software like this
Free during beta