CVE-2002-2124: The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows...

Security readout for executives and security teams

CVE-2002-2124 is a denial-of-service flaw reported in nylon 0.2. A remote connection that closes at the wrong time can leave the service stuck in a loop, consuming CPU and potentially degrading availability. The public bundle does not provide CVSS scoring, CPEs, vendor ownership, or a confirmed patch. Exposure appears limited to systems running nylon 0.2. The source bundle has no CPEs or vendor/product metadata beyond the nylon reference, so asset teams should verify whether nylon exists in legacy systems, embedded builds, or archived infrastructure. Treat this as a legacy availability risk. It is not known to be actively exploited, but any exposed nylon 0.2 service could be remotely driven into CPU exhaustion. Priority depends on whether the component exists in production. Mitigation focus: Check vendor, distribution, or maintainer guidance for nylon remediation.; Remove or replace nylon 0.2 if it is still deployed.; Restrict network access to any exposed nylon service..

Prepared

Jun 29, 2026, 17:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.