CVE-2003-0682

Description

"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	openssh	1:3.6.1p2-9	—
Debian 13	openssh	1:3.6.1p2-9	—
Debian 12	openssh	1:3.6.1p2-9	—
Debian 3.0	openssh	1:3.4p1-1.woody.3	DSA-382-3
Debian 3.0	openssh-krb5	3.4p1-0woody4	DSA-383

Advisories 2

DSA-382-3 ssh - possible remote vulnerability Debian Security (DSA / DLA) · Mar 9, 2026
DSA-383 ssh-krb5 - possible remote vulnerability Debian Security (DSA / DLA) · Mar 9, 2026

References

20030917 [OpenPKG-SA-2003.040] OpenPKG Security Advisory (openssh) mailing-list
DSA-383 vendor-advisory
RHSA-2003:280 vendor-advisory
CLA-2003:741 vendor-advisory
DSA-382 vendor-advisory
RHSA-2003:279 vendor-advisory
oval:org.mitre.oval:def:446 vdb-entry signature