CVE-2003-0462
A race condition in the way env_start and env_end pointers are initialized in the execve system...
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
Exploit likelihood
What each source reports
NVD Score used
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
- Record
CVE-2003-0462- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
- Record
CVE-2003-0462- Updated
- 2026-11-02
EUVDEUVD-2003-0456 No score
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
- Record
EUVD-2003-0456- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q96r-f8gg-v2g6 No score
A race condition in the way env_start and env_end pointers are initialized in the execve system...
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
- Record
GHSA-q96r-f8gg-v2g6- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.18Debian:3.0 |
before 2.4.18-11 | 2.4.18-11 |
kernel-image-2.4.18-1-i386Debian:3.0 |
before 2.4.18-9 | 2.4.18-9 |
kernel-image-2.4.18-i386bfDebian:3.0 |
before 2.4.18-5woody2, plus listed versions 2.4.18-5 |
2.4.18-5woody2 |
kernel-image-2.4.18-1-alphaDebian:3.0 |
before 2.4.18-8 | 2.4.18-8 |
kernel-image-2.4.17-ia64Debian:3.0 |
before kernel-image-2.4.17-ia64 | kernel-image-2.4.17-ia64 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.4 - SUID 'execve()' System Call Race Condition Executable File Read | 2003-06-26 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0462 is a low vulnerability (CVSS 1.2) in Linux Kernel, published July 25, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. Fixed in kernel-source-2.4.18 2.4.18-11.
References
redhat.com/support/errata/RHSA-2003-238.html
debian.org/security/2004/dsa-423
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A309
nvd.nist.gov/vuln/detail/CVE-2003-0462
github.com/advisories/GHSA-q96r-f8gg-v2g6