CVE-2003-0032: Medium severity mcrypt libmcrypt vulnerability
Published Jan 17, 2003
·Updated
Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service (memory exhaustion) via a large number of requests to the application, which causes libmcrypt to dynamically load algorithms via libtool.
Affected Software
4 affected components
mcrypt libmcrypt=2.5.1_r4
mcrypt libmcrypt=2.5.2
mcrypt libmcrypt=2.5_.0
mcrypt libmcrypt=2.5.3
Remediation
Patch Available
Event History
Jan 17, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-0032?
CVE-2003-0032 is considered a medium severity vulnerability due to its potential for denial of service through memory exhaustion.
2
How do I fix CVE-2003-0032?
To fix CVE-2003-0032, you should upgrade to libmcrypt version 2.5.5 or later.
3
What type of attack does CVE-2003-0032 pertain to?
CVE-2003-0032 pertains to denial of service attacks caused by a memory leak in libmcrypt.
4
Which versions of libmcrypt are affected by CVE-2003-0032?
CVE-2003-0032 affects libmcrypt versions 2.5.1_r4, 2.5.2, 2.5_.0, and 2.5.3.
5
What are the consequences of exploiting CVE-2003-0032?
Exploiting CVE-2003-0032 can lead to application instability and downtime due to memory exhaustion.