CVE-2007-0493 Use after free in n/a

What is CVE-2007-0493?

CVE-2007-0493 is a high-severity use after free vulnerability in Isc Bind, published on 25 Jan 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a freed fetch context."

Which versions are affected by CVE-2007-0493?

It affects 1 product.

Products include Isc Bind.

How do I fix CVE-2007-0493?

Upgrade to a fixed version.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2007-0493 being exploited?

There is no known exploitation of CVE-2007-0493 in the wild and no public exploit code.

Other vulnerabilities in Isc Bind

• CVE-2008-0122 Memory corruption in n/a Critical 10.0
• CVE-2001-0010 Memory corruption in n/a Critical 10.0
• CVE-2001-0011 Memory corruption in n/a Critical 10.0
• CVE-2001-0013 Memory corruption in n/a Critical 10.0
• CVE-2000-1029 Memory corruption in n/a Critical 10.0

All Isc Bind vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2007-0493, GHSA-p6fj-c7mp-96mv.