← All CVEs

CVE-2002-0400

medium · 5

ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.

5
CVSS
14.2%
EPSS (exploit prob.)
96th
EPSS percentile
2002-06-18
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
iscbind9.0
iscbind9.1
iscbind9.1.1
iscbind9.1.2
iscbind9.1.3
iscbind9.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2002-0400