VULNERABILITY INTELLIGENCE

CVE-2008-0122

CVSS score10 HIGH
EPSS probability12.40%
CISA KEVNot currently listed
Published2008-01-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Primary references