CVE-2003-0015
EPSS 37.0%cvs - doubly freed memory
Published: 2/7/2003Modified: 4/28/2026
Description
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
Affected packages (2)
- Debian/cvsfrom 0, < 1.11.2-5.1
- Debian/cvsfrom 0, < 1.11.1p1debian-8.1