CVE-2003-0028
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR ...
CVE-2003-0028 is a high vulnerability (CVSS 7.5) in Gnu Glibc, published March 21, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 15.0%, the 96th percentile. Fixed in dietlibc 0.22-2.
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
- Record
CVE-2003-0028- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
- Record
CVE-2003-0028- Updated
- 2026-11-02
EUVDEUVD-2003-0028 No score
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
- Record
EUVD-2003-0028- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-235q-hvh2-g375 No score
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR ...
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
- Record
GHSA-235q-hvh2-g375- Updated
- 2026-11-02
OSV No score
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
- Record
CVE-2003-0028- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0028 No score
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
- Record
DEBIAN-CVE-2003-0028- Updated
- 2026-11-02
Affected products
- gnu glibc
- cray unicos
- freebsd
- hp hp-ux
- hp hp-ux series 700
- hp hp-ux series 800
- ibm aix
- mit kerberos 5
- openafs
- openbsd
- sgi irix
- sun solaris
Show 1 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dietlibcDebian:12 |
before 0.22-2 | 0.22-2 |
dietlibcDebian:13 |
before 0.22-2 | 0.22-2 |
dietlibcDebian:14 |
before 0.22-2 | 0.22-2 |
glibcDebian:12 |
before 2.3.1-16 | 2.3.1-16 |
glibcDebian:13 |
before 2.3.1-16 | 2.3.1-16 |
glibcDebian:14 |
before 2.3.1-16 | 2.3.1-16 |
krb5Debian:12 |
before 1.3.3-2 | 1.3.3-2 |
krb5Debian:13 |
before 1.3.3-2 | 1.3.3-2 |
krb5Debian:14 |
before 1.3.3-2 | 1.3.3-2 |
krb5Debian:3.0 |
before 1.2.4-5woody4 | 1.2.4-5woody4 |
dietlibcDebian:3.0 |
before 0.12-2.5 | 0.12-2.5 |
glibcDebian:3.0 |
before 2.2.5-11.5 | 2.2.5-11.5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
linuxsecurity.com/advisories/engarde_advisory-3024.html
archives.neohapsis.com/archives/vulnwatch/2003-q1/0140.html
mandriva.com/security/advisories?name=MDKSA-2003:037
redhat.com/support/errata/RHSA-2003-052.html
cert.org/advisories/CA-2003-10.html
security.netapp.com/advisory/ntap-20150122-0002
Show 21 moreShow less
debian.org/security/2003/dsa-282
securityfocus.com/archive/1/316960/30/25250/threaded
novell.com/linux/security/advisories/2003_027_glibc.html
eeye.com/html/Research/Advisories/AD20030318.html
kb.cert.org/vuls/id/516825
marc.info?l=bugtraq&m=104860855114117&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A230
nvd.nist.gov/vuln/detail/CVE-2003-0028
github.com/advisories/GHSA-235q-hvh2-g375
security-tracker.debian.org/tracker/CVE-2003-0028