CVE-2002-0400

ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.

Scoring

CVSS base score
1.39
EPSS probability
27.73%
Published
2004-09-01
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs