VULNERABILITY INTELLIGENCE

CVE-2002-1220

CVSS score5 MEDIUM
EPSS probability9.60%
CISA KEVNot currently listed
Published2002-11-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.

Primary references