What’s Vulnerable › Vulnerabilities

CVE-2003-0418

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-07-24 · updated 2026-06-16

Description

The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses.

Affected products

• Linux kernel: 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 (+34)

References

• http://marc.info/?l=bugtraq&m=105519179005065&w=2
• http://www.cartel-securite.fr/pbiondi/adv/CARTSA-20030314-icmpleak.txt
• http://www.kb.cert.org/vuls/id/471084
• http://marc.info/?l=bugtraq&m=105519179005065&w=2
• http://www.cartel-securite.fr/pbiondi/adv/CARTSA-20030314-icmpleak.txt
• http://www.kb.cert.org/vuls/id/471084

Get alerted when CVE-2003-0418 or the next vulnerability affects your stack