Read the docs
TI-2002-00003 Aliases CVE-2002-0003GHSA-fvq6-6pr8-jc4x

Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to…

Priority LOW 36Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system.

Why it matters now

EPSS 0.01833 79th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:gnu:groff:*:*:*:*:*:*:*:*up to 1.16VulnerableGNU
  • cpe:2.3:a:gnu:groff:*:*:*:*:*:*:*:* Versions up to 1.16 Vulnerable ·GNU

Remediation

Red Hat 1 advisory

  • RHSA-2002:004 Released 2002-01-14 · Red Hat rating Important
    : : : New groff packages available to fix security problems
    • Red Hat Linux 7.0
    • Red Hat Linux 7.1
    • Red Hat Linux 7.2

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Linux 7.0Fixed RHSA-2002:004
Red Hat Linux 7.1Fixed RHSA-2002:004
Red Hat Linux 7.2Fixed RHSA-2002:004

Timeline

  1. 2026-10-02 Threatist record created from CVE-2002-0003
  2. 2026-10-03 Alias added: GHSA-fvq6-6pr8-jc4x

References

Patch 1

Advisory 1

  • TI-2000-00800 GNU Groff uses the current working directory to find a device description file, which… CVSS 2.0HIGH 10.0
  • TI-2001-00977 Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff… CVSS 2.0HIGH 7.5
  • TI-2009-04830 contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript… CVSS 3.0MEDIUM 6.5
  • TI-2009-04834 The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on… CVSS 2.0LOW 3.3
  • TI-2009-04833 The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3)… CVSS 2.0LOW 3.3
  • TI-2009-04832 The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3)… CVSS 2.0LOW 3.3
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences