Vulnerability in Freebsd

CVE-2002-1221

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.

EPSS: 0.076 (93.9th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 4.4, 4.5, 4.6
  • Isc Bind — versions 8.1, 8.1.1, 8.1.2
  • Openbsd — versions 3.0, 3.1, 3.2
  • N/a — versions n/a

References