CVE-2002-0092

6 documents6 sources
Severity
5.0MEDIUM
EPSS
1.3%
top 20.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
CVS CVS
Timeline
PublishedMar 15
Latest updateApr 30

Description

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDcvs/cvs1.10.8

Patches

Patch: www.debian.org ↗Patch: www.debian.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-6pfg-c738-q46f: CVS before 1↗2022-04-30
▶
CVEList
CVE-2002-0092: CVS before 1↗2002-06-25
▶

📋Vendor Advisories

2
Cisco
Vulnerability in the zlib Compression Library↗2002-04-03
▶
Red Hat
security flaw↗2002-02-20
▶

💬Community

1
Bugzilla
CVE-2002-0092 security flaw↗2018-08-16
▶