CVE-2007-0493 Common Vulnerabilities and Exposures

Upstream information

CVE-2007-0493 at MITRE

Description

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a freed fetch context."

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	7.8
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:C
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Complete

SUSE Bugzilla entry: 238634 [RESOLVED / FIXED]

SUSE Security Advisories:

SUSE-SA:2007:014, published Tue, 30 Jan 2007 11:00:00 +0000

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 02:02:29 2013
CVE page last modified: Fri Dec 8 16:19:28 2023