CVE-2002-0092: Cvs

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.

Affected products

• Cvs Cvs: up to and including 1.10.8

Published 2002-03-15. Last modified 2026-06-16.