CVE-2002-1146

CVE-2002-1146 describes a read buffer overflow vulnerability in the stub resolver libraries of BIND 4, BIND 8.2.x, and other libraries including glibc 2.2.5 and earlier. This flaw occurs when these libraries process DNS responses, using the maximum buffer size instead of the actual size, leading to reading past memory boundaries. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows remote attackers to cause a denial of service (crash) with low attack complexity and no authentication required. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.