Description
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dietlibc | 0.22-2 | — |
| Debian 14 | glibc | 2.3.1-16 | — |
| Debian 14 | krb5 | 1.3.3-2 | — |
| Debian 13 | dietlibc | 0.22-2 | — |
| Debian 13 | glibc | 2.3.1-16 | — |
| Debian 13 | krb5 | 1.3.3-2 | — |
| Debian 12 | dietlibc | 0.22-2 | — |
| Debian 12 | glibc | 2.3.1-16 | — |
| Debian 12 | krb5 | 1.3.3-2 | — |
| Debian 3.0 | dietlibc | 0.12-2.5 | DSA-272 |
| Debian 3.0 | glibc | 2.2.5-11.5 | DSA-282 |
| Debian 3.0 | krb5 | 1.2.4-5woody4 | DSA-266 |
Advisories 3
- DSA-266 krb5 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-282 glibc - integer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-272 dietlibc - integer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- ESA-20030321-010 vendor-advisory
- 20030319 EEYE: XDR Integer Overflow mailing-list
- MDKSA-2003:037 vendor-advisory
- RHSA-2003:052 vendor-advisory
- CA-2003-10 third-party-advisory
- https://security.netapp.com/advisory/ntap-20150122-0002/
- DSA-282 vendor-advisory
- 20030331 GLSA: krb5 & mit-krb5 (200303-28) mailing-list
- SuSE-SA:2003:027 vendor-advisory
- 20030319 RE: EEYE: XDR Integer Overflow mailing-list
- RHSA-2003:091 vendor-advisory
- AD20030318 third-party-advisory
- VU#516825 third-party-advisory
- 20030325 GLSA: glibc (200303-22) mailing-list
- 2003-0014 vendor-advisory
- 20030331 GLSA: dietlibc (200303-29) mailing-list
- RHSA-2003:051 vendor-advisory
- 20030319 EEYE: XDR Integer Overflow mailing-list
- oval:org.mitre.oval:def:230 vdb-entry signature
- DSA-266 vendor-advisory
- RHSA-2003:089 vendor-advisory
- 20030319 MITKRB5-SA-2003-003: faulty length checks in xdrmem_getbytes mailing-list
- 20030522 [slackware-security] glibc XDR overflow fix (SSA:2003-141-03) mailing-list
- DSA-272 vendor-advisory