CVE-2002-1220: freebsd

EPSS trend

Probability

9.60%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 9.60% on 20-09-2026

20-09-202620-10-2026

EPSS score

9.60%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoslinuxVerified
ISC BIND 8.3.x - OPT Record Large UDP Denial of Service
Maturity: poc

References

15 links

www.cert.org/advisories/CA-2002-31.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.isc.org/products/BIND/bind-security.htmlX Refsource CONFIRMPatchVendor Advisory
lists.apple.com/archives/Security-announce/2002/Nov/msg00000.htmlVendor AdvisoryX Refsource APPLE
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A449VDB EntrySignatureX Refsource OVAL
www.debian.org/security/2002/dsa-196Vendor AdvisoryX Refsource DEBIAN
online.securityfocus.com/advisories/4999Vendor AdvisoryX Refsource COMPAQ
marc.info?l=bugtraq&m=103763574715133&w=2Mailing ListX Refsource BUGTRAQ
www.kb.cert.org/vuls/id/229595Third Party AdvisoryX Refsource CERT VNUS Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/10332VDB EntryX Refsource XF
www.securityfocus.com/bid/6161VDB EntryX Refsource BID

Show all 15 references

online.securityfocus.com/archive/1/300019Mailing ListX Refsource BUGTRAQ
marc.info?l=bugtraq&m=103713117612842&w=2Mailing ListX Refsource BUGTRAQ
www.ciac.org/ciac/bulletins/n-013.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC
bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469Third Party AdvisoryX Refsource ISSPatchVendor Advisory
www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.phpVendor AdvisoryX Refsource MANDRAKE

Related vulnerabilities

CVE-2018-14775openbsdopenbsd0.34%8y ago01-08-2018 06:00tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service (system crash) due to incorrect I/O port access control on the i386 architecture.CVE-2018-5743alpinebind+496.46%7y ago09-10-2019 14:17By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.CVE-2018-5734iscbind+36.29%7y ago16-01-2019 20:00While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.CVE-2018-5742iscbind+161.57%6y ago30-10-2019 13:43While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.CVE-2018-5740alpinebind+3259.62%7y ago16-01-2019 20:00"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.CVE-2018-5736alpinebind+518.02%7y ago16-01-2019 20:00An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to cause a vulnerable server to initiate zone transfers (for example: by sending valid NOTIFY messages), causing the named process to exit after failing the assertion test. Affects BIND 9.12.0 and 9.12.1.

All vulnerabilities infreebsd bind openbsd

CVE-2002-1220: freebsd

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References