Debian Security Bug TrackerDEBIANCVE:CVE-2002-2211CVE-2002-2211
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.019 Low
EPSS
Percentile
88.7%
BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | bind9 | < 1:9.18.24-1 | bind9_1:9.18.24-1_all.deb |
| Debian | 11 | all | bind9 | < 1:9.16.48-1 | bind9_1:9.16.48-1_all.deb |
| Debian | 999 | all | bind9 | < 1:9.19.24-185-g392e7199df2-1 | bind9_1:9.19.24-185-g392e7199df2-1_all.deb |
| Debian | 13 | all | bind9 | < 1:9.19.24-185-g392e7199df2-1 | bind9_1:9.19.24-185-g392e7199df2-1_all.deb |
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.019 Low
EPSS
Percentile
88.7%