Unscored severity · published Aug 12, 2002
CVE-2002-0684
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious…
–
CVSS
5.9%
EPSS
No
On KEV
Description
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Bind · Isc
4.9.8 · source: NVD
GL
Glibc · Gnu
through 2.2.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0684
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0684
distro.conectiva.com
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507
marc.info
http://marc.info/?l=bugtraq&m=102581482511612&w=2
Patch
http://rhn.redhat.com/errata/RHSA-2002-139.html
US Government Resource
http://www.kb.cert.org/vuls/id/542971
www.linux-mandrake.com
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-050.php
More from Glibc
7.8
CVE-2023-4911
Glibc: buffer overflow in ld.so leading to privilege escalation
9.8
CVE-2026-5450
scanf %mc off-by-one heap buffer overflow
9.8
CVE-2023-0687
A vulnerability was found in GNU C Library 2.38
9.8
CVE-2023-25139
sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size
9.8
CVE-2022-23218
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating…