CVE-2002-1232: Debian Linux

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.

Affected products

• Debian Debian Linux: version 2.2 only; version 3.0 only
• HP Secure OS: version 1.0 only
• Red Hat Linux: version 6.2 only; version 7.0 only; version 7.1 only; version 7.2 only; version 7.3 only

Published 2002-11-04. Last modified 2026-06-16.