CVE-2003-0643
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3...
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
Exploit likelihood
What each source reports
NVD Score used
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
- Record
CVE-2003-0643- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
- Record
CVE-2003-0643- Updated
- 2026-11-02
EUVDEUVD-2003-0637 No score
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
- Record
EUVD-2003-0637- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mrpc-7q77-p54w No score
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3...
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
- Record
GHSA-mrpc-7q77-p54w- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.18Debian:3.0 |
before 2.4.18-11 | 2.4.18-11 |
kernel-image-2.4.18-1-i386Debian:3.0 |
before 2.4.18-9 | 2.4.18-9 |
kernel-image-2.4.18-i386bfDebian:3.0 |
before 2.4.18-5woody2, plus listed versions 2.4.18-5 |
2.4.18-5woody2 |
kernel-image-2.4.18-1-alphaDebian:3.0 |
before 2.4.18-8 | 2.4.18-8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0643 is a low vulnerability (CVSS 2.1) in Linux Kernel, published July 25, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in kernel-source-2.4.18 2.4.18-11.
References
mirror.clarkson.edu/pub/distributions/gentoo-portage/sys-kernel/wolk-sources/ChangeLog
ftp.belnet.be/linux/gentoo-portage/sys-kernel/gentoo-sources/files/gentoo-sources-2.4.CAN-2003-0643.patch
secunia.com/advisories/23265
ultramonkey.org/bugs/cve/CAN-2003-0643.shtml
xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
gentoo.kems.net/gentoo-x86-portage/sys-kernel/gentoo-sources/ChangeLog
nvd.nist.gov/vuln/detail/CVE-2003-0643
github.com/advisories/GHSA-mrpc-7q77-p54w