Skip to content

CVE-2003-0031

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service ...

7.5 HighFix available

CVE-2003-0031 is a high vulnerability (CVSS 7.5) in Mcrypt Libmcrypt, published January 14, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.73%, the 77th percentile. Fixed in libmcrypt 2.5.5-1.

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).

Exploit likelihood

1.73%Up 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).

Record: CVE-2003-0031
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).

Record: CVE-2003-0031
Updated: 2026-11-02

EUVDEUVD-2003-0031 No score

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).

Record: EUVD-2003-0031
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9m5c-xf3g-pwxw No score

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service ...

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).

Record: GHSA-9m5c-xf3g-pwxw
Updated: 2026-11-02

OSV No score

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).

Record: CVE-2003-0031
Updated: 2026-11-02

OSVDEBIAN-CVE-2003-0031 No score

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).

Record: DEBIAN-CVE-2003-0031
Updated: 2026-11-02

Affected products

mcrypt libmcrypt

Affected packages

Affected packages
Package	Affected	Fixed
`libmcrypt` Debian:12	before 2.5.5-1	2.5.5-1
`libmcrypt` Debian:13	before 2.5.5-1	2.5.5-1
`libmcrypt` Debian:14	before 2.5.5-1	2.5.5-1
`libmcrypt` Debian:3.0	before 2.5.0-1woody1, plus listed versions 2.5.0-1	2.5.0-1woody1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References