CVE-2002-0400

Description

ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.

5.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 27.73% Top 5%

Vendor Advisory com.br Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory neohapsis.com Vendor Advisory caldera.com Vendor Advisory novell.com Vendor Advisory iss.net

Affected: n/a n/a

References

Link	Tags
http://www.isc.org/index.pl?/sw/bind/bind-security.php
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000494	vendor advisory
http://www.redhat.com/support/errata/RHSA-2002-119.html	vendor advisory
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038	vendor advisory
http://www.securityfocus.com/bid/4936	vdb entry
http://www.redhat.com/support/errata/RHSA-2002-105.html	vendor advisory
http://www.cert.org/advisories/CA-2002-15.html	us government resource third party advisory patch
http://www.redhat.com/support/errata/RHSA-2003-154.html	vendor advisory
http://www.kb.cert.org/vuls/id/739123	us government resource third party advisory patch
http://archives.neohapsis.com/archives/hp/2002-q3/0022.html	vendor advisory
ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.24.1/CSSA-2002-SCO.24.1.txt	vendor advisory
http://www.iss.net/security_center/static/9250.php	vdb entry vendor advisory
http://www.novell.com/linux/security/advisories/2002_21_bind9.html	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2002-0400?: CVE-2002-0400 has been scored as a medium severity vulnerability.
How to fix CVE-2002-0400?: To fix CVE-2002-0400, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2002-0400 being actively exploited in the wild?: It is possible that CVE-2002-0400 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~28% probability that this vulnerability will be exploited by malicious actors in the next 30 days.