CVE-2003-0653

CVE-2003-0653 describes a denial-of-service vulnerability in the OSI networking kernel (sys/netiso) of NetBSD 1.6.1 and earlier versions. The flaw arises from the kernel's failure to use a required "PKTHDR" mbuf when sending specific error responses to OSI packet senders. This oversight allows remote attackers to trigger a kernel panic or crash by sending specially crafted OSI packets. The vulnerability is rated with a CVSS score of 5.0 (Medium), indicating a network-based attack vector with low attack complexity and no authentication required, leading to a partial availability impact. While the EPSS score is low, suggesting minimal current exploitation probability, the FAUCET Risk Score is 17/100. There is no evidence of active exploitation, nor are there any known public exploit codes available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are virtually nonexistent, which is typical for a large percentage of older vulnerabilities.