CVE-2003-0015

CVE-2003-0015 describes a double-free vulnerability in CVS 1.11.4 and earlier versions, affecting various CVS implementations including those in FreeBSD. This flaw allows remote, unauthenticated attackers to trigger a denial of service and potentially execute arbitrary code by sending a malformed Directory request. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, an ExploitDB entry (EDB-22187) confirms the existence of exploit code, though there is no evidence of active exploitation or significant community discussion.