VDB
DEBIAN-CVE-2002-0684
DEBIAN-CVE-2002-0684
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | glibc | 0, 0, 0 |
| Debian:12 | glibc | 0, 0, 0 |
| Debian:14 | glibc | 0, 0, 0 |
| Debian:11 | glibc | 0, 0, 0 |
Timeline
- Aug 12, 2002 CVE Published
- Apr 28, 2026 CVE Updated