CVE-2002-1220

Description

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.

Risk Information

Base Score

7.5

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

32.686

Associated Vulnerability

Vulnerability	OS Platform
Update bind 8.3.3 to latest version	Windows
Multiple Vulnerabilities are affected in BIND 8.3.0	Windows
Multiple Vulnerabilities are affected in BIND 8.3.1	Windows
Multiple Vulnerabilities are affected in BIND 8.3.2	Windows
Multiple Vulnerabilities are affected in BIND 8.3.3	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234