CVE-2003-0689

DEB

HighConfirmedExploit available

The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and exec…

CVSS

7.5

High

EPSS

0.02

p79

Published

2003-01-01

Updated

2003-01-01

Description

The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow.

Affected products

Enterprise_linux

CVSS vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Timeline

2003-01-01

Published

2003-01-01

Updated

CVSS 3.1 breakdown

Attack Vector

AV: N

Network (N)

Attack Complexity

AC: L

Low (L)

Authentication

Au: N

None (N)

Confidentiality Impact

C: P

Partial

Integrity Impact

I: P

Partial

Availability Impact

A: P

Partial

Exploit indicators

EPSS

0.021 · p79

Known exploited (KEV)

Known exploits — Сканер-ВС

21018

exploitdb · https://www.exploit-db.com/exploits/21018

Enterprise

290

exploitdb · https://www.exploit-db.com/exploits/290

Enterprise

Affected products

Product	Vendor	Status
glibc		Tracked
enterprise_linux	*	Tracked