CVE-2002-1221

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.

Scoring

CVSS base score
0.17
EPSS probability
4.30%
Published
2004-09-01
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs