CVE-2003-0551 Denial of service in n/a

What is CVE-2003-0551?

CVE-2003-0551 is a medium-severity denial of service vulnerability in Redhat Linux, published on 25 Jul 2003. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service.

Which versions are affected by CVE-2003-0551?

It affects 1 product.

Products include Redhat Linux.

How do I fix CVE-2003-0551?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2003-0551 being exploited?

There is no known exploitation of CVE-2003-0551 in the wild and no public exploit code.

Other vulnerabilities in Redhat Linux

• CVE-2000-1220 Privilege escalation in n/a Critical 10.0
• CVE-2003-0248 Privilege escalation in n/a Critical 10.0
• CVE-1999-1542 Command injection in n/a Critical 10.0
• CVE-1999-1299 Privilege escalation in n/a Critical 10.0
• CVE-2000-0322 Command injection in n/a Critical 10.0

All Redhat Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-m7mj-crmr-p92x.