What’s Vulnerable › Vulnerabilities

CVE-2002-1563

• Severity: low (CVSS 1.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2003-05-12 · updated 2026-06-16

Description

stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter.

Affected products

• stunnel: 4.04

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000736
• http://marc.info/?l=bugtraq&m=104247606910598
• http://marc.info/?l=bugtraq&m=106029168514511&w=2
• http://marc.info/?l=stunnel-users&m=103600188215117&w=2
• http://www.linuxsecurity.com/advisories/engarde_advisory-3535.html
• http://www.redhat.com/support/errata/RHSA-2003-221.html
• http://www.redhat.com/support/errata/RHSA-2003-223.html
• http://www.securityfocus.com/bid/6592
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000736
• http://marc.info/?l=bugtraq&m=104247606910598
• http://marc.info/?l=bugtraq&m=106029168514511&w=2
• http://marc.info/?l=stunnel-users&m=103600188215117&w=2

Get alerted when CVE-2002-1563 or the next vulnerability affects your stack