Every CVESearch/Get API key

CVE-2003-0026

Multiple stack-based buffer overflows in the error handling routines of the minires library, as...

7.5 HighFix available

CVE-2003-0026 is a high vulnerability (CVSS 7.5) in Isc Dhcpd, published January 16, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.9%, the 97th percentile. Fixed in dhcp3 3.0+3.0.1rc9-2.1.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
18.9%EPSS, 97th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
3.0+3.0.1rc9-2.1dhcp3

Description

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.

Exploit likelihood

18.9%Up 2.6 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dhcp3
Debian:3.0
before 3.0+3.0.1rc9-2.1
3.0+3.0.1rc9-2.1

What each source reports

NVD Score used7.5

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.

Record
CVE-2003-0026
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.

Record
CVE-2003-0026
Updated
2026-11-02
EUVDEUVD-2003-0026No score

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.

Record
EUVD-2003-0026
Updated
2026-11-03
GitHub AdvisoriesGHSA-jgfq-29vq-wj6mNo score

Multiple stack-based buffer overflows in the error handling routines of the minires library, as...

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.

Record
GHSA-jgfq-29vq-wj6m
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 9 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open