CVE-2002-1146: Buffer Overflow
The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary ("read buffer overflow"), allowing remote attackers to cause a denial of service (crash).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1146?
CVE-2002-1146 is considered a critical vulnerability due to its potential to cause buffer overflows, leading to remote code execution.
How do I fix CVE-2002-1146?
To fix CVE-2002-1146, upgrade the affected BIND or glibc libraries to versions that are not subject to this vulnerability.
Which systems are affected by CVE-2002-1146?
CVE-2002-1146 affects systems using BIND 4, BIND 8.2.x, and glibc versions up to and including 2.2.5.
What are the potential impacts of CVE-2002-1146?
The exploitation of CVE-2002-1146 can result in denial of service, data corruption, or unauthorized access to system resources.
How can I determine if my system is vulnerable to CVE-2002-1146?
You can determine if your system is vulnerable to CVE-2002-1146 by checking the installed versions of BIND and glibc against the vulnerable versions listed in the CVE.