p PatchFirst

CVE-2002-0684

CVE-2002-0684

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

EPSS 5.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • glibc Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.2.5-8

    Update to 2.2.5-8

  • glibc Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.2.5-8

    Update to 2.2.5-8

  • glibc Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.2.5-8

    Update to 2.2.5-8

Original sources

Check your server →