PT-2007-1953 · Isc+1 · Isc Bind+1

Published 2007-01-25 · Updated 2023-02-13 · CVE-2007-0493

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.3.0 through 9.3.3 ISC BIND versions 9.4.0a1 through 9.4.0a6 ISC BIND versions 9.4.0b1 through 9.4.0b4 ISC BIND version 9.4.0rc1 ISC BIND version 9.5.0a1

Description The issue allows remote attackers to cause a denial of service, resulting in the named daemon crashing. This occurs when unspecified vectors cause named to dereference a freed fetch context.

Recommendations For ISC BIND versions 9.3.0 through 9.3.3, update to a version outside of this range to resolve the issue. For ISC BIND versions 9.4.0a1 through 9.4.0a6, update to a version outside of this range to resolve the issue. For ISC BIND versions 9.4.0b1 through 9.4.0b4, update to a version outside of this range to resolve the issue. For ISC BIND version 9.4.0rc1, update to a version outside of this range to resolve the issue. For ISC BIND version 9.5.0a1, update to a version outside of this range to resolve the issue.

Fix

Related Identifiers

CVE-2007-0493

HPSBUX02219

RHSA-2007:0057

RHSA-2007_0057

Affected Products

Isc Bind

Red Hat

References · 61

• http://lists.apple.com/archives/security-announce/2007/May/msg00004.html · Vendor Advisory
• http://fedoranews.org/cms/node/2537 · Vendor Advisory
• https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-0493 · Vendor Advisory
• http://secunia.com/advisories/23904 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09531 · Security Note
• https://bdu.fstec.ru/vul/2015-01376 · Security Note
• http://security.gentoo.org/glsa/glsa-200702-06.xml · Vendor Advisory
• http://trustix.org/errata/2007/0005 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0494 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-0493 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-0493 · Vendor Advisory
• http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4339 · Security Note