{"id":"CVE-2003-0465","aliases":["EUVD-2003-0459","GHSA-9rqv-ch6p-mx45","RHSA-2004:188"],"status":"published","title":"The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures...","description":"The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01863,"percentile":0.79412,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2003-07-15T04:00:00Z","modified":"2026-06-26T10:01:13Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-BOOT","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-hugemem-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-smp-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kernel-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-BOOT","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-hugemem-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-smp-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kernel-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-BOOT","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-hugemem-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-smp-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kernel-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-BOOT","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-hugemem-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-smp-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kernel-unsupported","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.21-15.EL"}]}],"bundled":6}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2004-188.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=linux-kernel\u0026m=105796415223490\u0026w=2","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=linux-kernel\u0026m=105796021120436\u0026w=2","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10285","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0465","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9rqv-ch6p-mx45"},{"url":"https://access.redhat.com/errata/RHSA-2004:188","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=102194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=104633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=106503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=106584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=106969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=108958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=109618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=109843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=109914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=110170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=110999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=111250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=111264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=111287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=111629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=111681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=111768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=111903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=111911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=112190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=112359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=112449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=112584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=112764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=112826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113100","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=113890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=114052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=114135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=114553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=114560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=114773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=114869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=114940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=114942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=115273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=115438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=115823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=116916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=117741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=117941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=118397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=118556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=118647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=118882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=118885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=119174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=119545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=119903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=120341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=122077","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_188.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2003-0461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-0461","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0461","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2003-0465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-0465","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2003-0984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-0984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0984","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2003-1040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617124","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-1040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-0003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-0003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0003","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-0010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-0010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0010","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2003-0465","description":"The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.","status":"published","published":"2003-07-15T04:00:00Z","modified":"2024-08-08T01:58:10.361Z","updated_at":"2026-11-02T14:20:16.757505Z"}],"euvd":[{"id":"EUVD-2003-0459","description":"The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.","status":"published","published":"2003-07-15T04:00:00Z","modified":"2024-08-08T01:58:10Z","updated_at":"2026-11-03T01:15:07.267875Z"}],"ghsa":[{"id":"GHSA-9rqv-ch6p-mx45","title":"The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures...","description":"The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.","status":"published","published":"2022-04-29T01:26:28Z","modified":"2023-01-30T05:01:23Z","updated_at":"2026-11-02T14:46:24.052847Z"}],"nvd":[{"id":"CVE-2003-0465","description":"The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.","status":"published","published":"2003-08-18T04:00:00Z","modified":"2026-06-16T22:02:15.153Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:46.710758Z"}],"osv":[{"id":"RHSA-2004:188","title":"Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 2","status":"published","published":"2024-09-12T22:07:03Z","modified":"2026-06-26T10:01:13Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}