CVE catalog

CVE-2000-0887

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative reco

[CVE catalog]

Severity
Medium · CVSS 5AV:N/AC:L/Au:N/C:N/I:N/A:P
Published
Updated
Source
[NVD] · [CVE record]
EPSS
22.94% · Oct 27, 2026

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug." This issue was fixed in the following products: - Red Hat Linux 5.2 - RHSA-2000:107 (2000-11-16) - Red Hat Linux 6.0 - RHSA-2000:107 (2000-11-16) - Red Hat Linux 6.1 - RHSA-2000:107 (2000-11-16) - Red Hat Linux 6.2 - RHSA-2000:107 (2000-11-16) - Red Hat Linux 7.0 - RHSA-2000:107 (2000-11-16)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpebindNot reportedNot reportedunknown

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References