Every CVE Search/ Get API key

CVE-2002-0684

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as...

7.5 HighFix available

CVE-2002-0684 is a high vulnerability (CVSS 7.5) in Gnu Glibc, published July 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.86%, the 93rd percentile. Fixed in glibc 2.2.5-8.

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

Exploit likelihood

5.86%Up 2.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

Record
CVE-2002-0684
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

Record
CVE-2002-0684
Updated
2026-11-02
EUVDEUVD-2002-0678 No score

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

Record
EUVD-2002-0678
Updated
2026-11-03
GitHub AdvisoriesGHSA-w4pr-xjh8-387g No score

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as...

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

Record
GHSA-w4pr-xjh8-387g
Updated
2026-11-02
OSV No score

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

Record
CVE-2002-0684
Updated
2026-11-02
OSVDEBIAN-CVE-2002-0684 No score

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

Record
DEBIAN-CVE-2002-0684
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glibc
Debian:12
before 2.2.5-8
2.2.5-8
glibc
Debian:13
before 2.2.5-8
2.2.5-8
glibc
Debian:14
before 2.2.5-8
2.2.5-8

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

MoveEnter Open