Unscored severity · published Aug 27, 2003
CVE-2003-0462
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial…
–
CVSS
0.6%
EPSS
No
On KEV
Description
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4; 2.4.5; +16 more · source: NVD
ML
Mandrake Linux · Mandrakesoft
8.2; 8.2; 9.0 · source: NVD
ML
Mandrake Linux Corporate Server · Mandrakesoft
2.1 · source: NVD
MM
Mandrake Multi Network Firewall · Mandrakesoft
8.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0462
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0462
www.debian.org
http://www.debian.org/security/2004/dsa-358
Patch
http://www.debian.org/security/2004/dsa-423
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2003-198.html
Patch
http://www.redhat.com/support/errata/RHSA-2003-238.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2003-239.html
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A309
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability