CVE-2002-0400

security flaw

Published Sep 1, 2004 CVSS 2.0 · 5.0 Medium EPSS 14.2% KEV · Not listed
Description
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 2:49 AM
Reserved
Jun 3, 2002, 12:00 AM
Status
Modified
Published
Jun 18, 2002, 4:00 AM
Modified
Jun 16, 2026, 9:57 PM
Severity
Important
Public date
Jun 4, 2002, 12:00 AM