CVE-2002-0391: exploitation status and patch state

CVE-2002-0391 · CVSS 9.8 CRITICAL · EPSS 58%

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Is CVE-2002-0391 exploited?

• Not in the CISA KEV catalog.
• EPSS puts exploitation in the next 30 days at 58%.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

• freebsd · freebsd · <= 4.6.1
• openbsd · openbsd · 3.1
• sun · solaris · 2.6, 9.0
• sun · sunos · 5.5.1, 5.7, 5.8
• microsoft · windows 2000
• microsoft · windows nt · 4.0
• microsoft · windows xp

Is there a patch?

No patch identifier recorded here yet.

What PlainSec published about CVE-2002-0391

• HPE NonStop fix for XDR Streams needs a coldload (2026-10-13)

Primary sources

• NVD record

What this record does not say

• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-10-13.