CVE-2002-1219(freebsd / bind)

LOWCVSS 7.5 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • bind
  • freebsd
  • openbsd

Affected systems

Products
bindfreebsdopenbsd

24 versions affected across 3 products

Deep dive

Full discourse1 post
  • Paul@snowandcaffeine

    @martin_casado Flashbacks of CVE-2002-1219 and that ~6 month period with a ton of BIND exploits

    100702.1K
    647 followersView on X
CPE platform detail24 entries

24 of 24 entries

PartVendorProductVersionTarget SWTarget HW
OSfreebsdfreebsd4.4--
OSfreebsdfreebsd4.5--
OSfreebsdfreebsd4.6--
OSfreebsdfreebsd4.7--
Appiscbind4.9.10--
Appiscbind4.9.5--
Appiscbind4.9.6--
Appiscbind4.9.7--
Appiscbind4.9.8--
Appiscbind4.9.9--
Appiscbind8.2--
Appiscbind8.2.1--
Appiscbind8.2.2--
Appiscbind8.2.3--
Appiscbind8.2.4--
Appiscbind8.2.5--
Appiscbind8.2.6--
Appiscbind8.3.0--
Appiscbind8.3.1--
Appiscbind8.3.2--
Appiscbind8.3.3--
OSopenbsdopenbsd3.0--
OSopenbsdopenbsd3.1--
OSopenbsdopenbsd3.2--

Explore more