CVE-2002-0400
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a...
CVE-2002-0400 is a medium vulnerability (CVSS 5.0) in Isc Bind, published June 18, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.2%, the 96th percentile. No source names a fixed version.
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
Exploit likelihood
What each source reports
NVD Score used
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
- Record
CVE-2002-0400- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
- Record
CVE-2002-0400- Updated
- 2026-11-02
EUVDEUVD-2002-0397 No score
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
- Record
EUVD-2002-0397- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7h7w-5gqf-34vm No score
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a...
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
- Record
GHSA-7h7w-5gqf-34vm- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
isc.org/index.pl?/sw/bind/bind-security.php
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000494
redhat.com/support/errata/RHSA-2002-119.html
frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038
securityfocus.com/bid/4936
Show 8 moreShow less
cert.org/advisories/CA-2002-15.html
kb.cert.org/vuls/id/739123
archives.neohapsis.com/archives/hp/2002-q3/0022.html
iss.net/security_center/static/9250.php
novell.com/linux/security/advisories/2002_21_bind9.html
nvd.nist.gov/vuln/detail/CVE-2002-0400
github.com/advisories/GHSA-7h7w-5gqf-34vm