CVE-2003-0619 describes an integer signedness error in the Linux kernel's NFSv3 implementation (specifically, the decode_fh function in nfs3xdr.c) affecting versions prior to 2.4.21. This flaw allows unauthenticated remote attackers to trigger a kernel panic, leading to a denial of service, by sending specially crafted XDR data with a negative size value during an NFSv3 procedure call. While the CVSS score is moderate (5.0), its impact is limited to availability. There is no evidence of active exploitation, though a proof-of-concept exploit exists on ExploitDB, and it has received negligible community or media attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.4.21CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.