CVE-2003-0653: Medium severity NetBSD NetBSD vulnerability

Published Aug 5, 2003

Updated

The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service (kernel panic or crash) via certain OSI packets.

Affected Software

6 affected components

NetBSD NetBSD=1.5.3

NetBSD NetBSD=1.6

NetBSD NetBSD=1.5

NetBSD NetBSD=1.6.1

NetBSD NetBSD=1.5.1

NetBSD NetBSD=1.5.2

Event History

Aug 5, 2003

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Aug 27, 2003

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0653?

CVE-2003-0653 is classified as a denial of service vulnerability that can lead to kernel panic or crash.

How do I fix CVE-2003-0653?

To fix CVE-2003-0653, update your NetBSD system to a version later than 1.6.1.

Which versions of NetBSD are affected by CVE-2003-0653?

CVE-2003-0653 affects NetBSD versions 1.5, 1.5.1, 1.5.2, 1.5.3, and 1.6.0.

What type of attacks can exploit CVE-2003-0653?

CVE-2003-0653 can be exploited by sending specially crafted OSI packets to the affected NetBSD systems.

Is CVE-2003-0653 a critical vulnerability?

While CVE-2003-0653 is a denial of service vulnerability, it is considered critical in environments where availability is crucial.