CVE-2003-0418: Linux Kernel

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses.

Affected products

• Linux Linux Kernel: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 2003-07-24. Last modified 2026-06-16.