CVE-2002-0684
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as...
CVE-2002-0684 is a high vulnerability (CVSS 7.5) in Gnu Glibc, published July 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.86%, the 93rd percentile. Fixed in glibc 2.2.5-8.
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
Exploit likelihood
What each source reports
NVD Score used
7.5
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
- Record
CVE-2002-0684- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
- Record
CVE-2002-0684- Updated
- 2026-11-02
EUVDEUVD-2002-0678 No score
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
- Record
EUVD-2002-0678- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w4pr-xjh8-387g No score
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as...
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
- Record
GHSA-w4pr-xjh8-387g- Updated
- 2026-11-02
OSV No score
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
- Record
CVE-2002-0684- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-0684 No score
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
- Record
DEBIAN-CVE-2002-0684- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
linux-mandrake.com/en/security/2002/MDKSA-2002-050.php
distro.conectiva.com/atualizacoes?id=a&anuncio=000507
kb.cert.org/vuls/id/542971
marc.info?l=bugtraq&m=102581482511612&w=2
rhn.redhat.com/errata/RHSA-2002-139.html
nvd.nist.gov/vuln/detail/CVE-2002-0684
github.com/advisories/GHSA-w4pr-xjh8-387g
security-tracker.debian.org/tracker/CVE-2002-0684