CVE-2007-0493
HIGH 7.8EPSS 12.5%
Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a freed fetch context."
- CVSS v2.0 NVD
- 7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C - EPSS
- 12.45% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2007-01-25
- Updated
- 2024-08-07
Proof-of-concept exploits (1)
Security advisories
- http://secunia.com/advisories/23904
- http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8
- http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:030
- http://www.redhat.com/support/errata/RHSA-2007-0057.html
- http://www.securityfocus.com/bid/22229
- http://www.ubuntu.com/usn/usn-418-1