VDB
CVE-2003-1013
CVE-2003-1013
PUBLISHED
CVSS 7.5 HIGH
The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.
EPSS 2.72% · 85.9th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
2.72%
85.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| ethereal | ethereal | 0 |
Timeline
- Dec 17, 2003 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jun 24, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
References
- 20040103-01-U vendor-advisory
- CLA-2004:801 vendor-advisory
- 20040202-01-U vendor-advisory
- 10531 third-party-advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10097 technical
- http://www.ethereal.com/appnotes/enpa-sa-00012.html technical
- http://www.redhat.com/support/errata/RHSA-2004-002.html technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A857 technical
- https://nvd.nist.gov/vuln/detail/CVE-2003-1013 advisory
- http://secunia.com/advisories/10568 url
- http://secunia.com/advisories/10570 url
- http://www.debian.org/security/2003/dsa-407 url
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:002 url
- http://www.redhat.com/support/errata/RHSA-2004-001.html url