CVE-2002-2124: Nylon

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) by closing the connection while recv is executing.

Affected products

• Nylon Nylon: version 0.2 only

Published 2002-12-31. Last modified 2026-06-16.