CVE-2003-0001

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes,...

5.0 MediumPublic exploitFix available

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

Exploit likelihood

72.5%Up 28.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2003-0001
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2003-0001
Updated: 2026-11-02

EUVDEUVD-2003-0001 No score

Record: EUVD-2003-0001
Updated: 2026-11-03

GitHub AdvisoriesGHSA-945x-53jf-h5qf No score

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes,...

Record: GHSA-945x-53jf-h5qf
Weakness: CWE-200
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel-source-2.4.18` Debian:3.0	before 2.4.18-9	2.4.18-9
`kernel-image-2.4.18-1-i386` Debian:3.0	before 2.4.18-8	2.4.18-8
`kernel-image-2.4.18-i386bf` Debian:3.0	before 2.4.18-5woody1., plus listed versions 2.4.18-5	2.4.18-5woody1.
`kernel-patch-2.4.18-powerpc` Debian:3.0	before 2.4.18-1woody1	2.4.18-1woody1
`kernel-source-2.4.17` Debian:3.0	before 2.4.17-1woody1	2.4.17-1woody1
`kernel-patch-2.4.17-mips` Debian:3.0	before 2.4.17-0.020226.2.woody2	2.4.17-0.020226.2.woody2
`kernel-source-2.2.20` Debian:3.0	before 2.2.20-5woody2	2.2.20-5woody2
`kernel-image-2.2.20-i386` Debian:3.0	before 2.2.20-5woody3	2.2.20-5woody3
`kernel-image-2.4.17-ia64` Debian:3.0	before kernel-image-2.4.17-ia64	kernel-image-2.4.17-ia64
`kernel-patch-2.4.17-s390` Debian:3.0	before 0.0.20020816-0.woody.2	0.0.20020816-0.woody.2
`kernel-image-2.4.17-s390` Debian:3.0	before 2.4.17-2.woody.3	2.4.17-2.woody.3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Linux Kernel 2.0.x/2.2.x/2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure	2007-03-23
Exploit-DB	Cisco ASA < 8.4.4.6 < 8.2.5.32 - Ethernet Information Leak	2013-06-10
Exploit-DB	Ethernet Device Drivers Frame Padding - 'Etherleak' Infomation Leakage	2007-03-23
PoC in GitHub	marb08/etherleak-checker	2024-10-01

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0001 is a medium vulnerability (CVSS 5.0) in Linux Kernel, published January 8, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 72.5%, the 99th percentile. Fixed in kernel-source-2.4.18 2.4.18-9.

References

Show 11 moreShow less