HIGH
bind use-after-free
Published Jan 25, 2007
7.8
HIGHCVSS 2.0
EPSS 12.45%
Description
Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a freed fetch context."
Affected products
No data.
No data.
Red Hat Enterprise Linux 5
bind-30:9.3.3-8.el5
Fixed · RHSA-2007:0057
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | bind-30:9.3.3-8.el5 | Fixed | RHSA-2007:0057 |
No package ranges for this CVE.
Remediation
Red Hat statement
Not vulnerable. This issue did not affect the versions of ISC BIND as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
7.8 HIGH NVD
AV:N/AC:L/Au:N/C:N/I:N/A:C
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Complete
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
12.45% 0.12452
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.
EPSS probability 0.12452
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (20 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 2, 2026 | 12.45% (0.12452) | 96.10th | v5 (v2026.06.15) |
| Jun 15, 2026 | 12.08% (0.12079) | 95.60th | v5 (v2026.06.15) |
| Feb 19, 2026 | 13.84% (0.13838) | 94.14th | v4 (v2025.03.14) |
| Jul 22, 2025 | 15.34% (0.15340) | 94.30th | v4 (v2025.03.14) |
| Jun 2, 2025 | 19.55% (0.19547) | 95.12th | v4 (v2025.03.14) |
| Mar 30, 2025 | 24.46% (0.24457) | 95.65th | v4 (v2025.03.14) |
| Mar 29, 2025 | 39.11% (0.39111) | 95.89th | v4 (v2025.03.14) |
| Mar 17, 2025 | 24.46% (0.24457) | 95.65th | v4 (v2025.03.14) |
| Dec 17, 2024 | 38.50% (0.38501) | 97.24th | v3 (v2023.03.01) |
| Mar 22, 2024 | 22.32% (0.22325) | 96.38th | v3 (v2023.03.01) |
| Jan 6, 2024 | 19.90% (0.19899) | 95.87th | v3 (v2023.03.01) |
| Nov 29, 2023 | 13.07% (0.13071) | 94.97th | v3 (v2023.03.01) |
| Oct 22, 2023 | 10.37% (0.10374) | 94.33th | v3 (v2023.03.01) |
| Sep 14, 2023 | 7.96% (0.07957) | 93.47th | v3 (v2023.03.01) |
| Jun 29, 2023 | 7.70% (0.07698) | 93.23th | v3 (v2023.03.01) |
| Mar 7, 2023 | 6.62% (0.06618) | 92.64th | v3 (v2023.03.01) |
| Mar 6, 2023 | 26.38% (0.26383) | 97.10th | v2 (v2022.01.01) |
| Feb 13, 2023 | 26.38% (0.26383) | 97.05th | v2 (v2022.01.01) |
| Feb 3, 2023 | 17.84% (0.17838) | 96.14th | v2 (v2022.01.01) |
| Feb 4, 2022 | 26.38% (0.26383) | 95.72th | v2 (v2022.01.01) |
Weaknesses (1)
References (51)
- http://docs.info.apple.com/article.html?artnum=305530 x_refsource_CONFIRM
- http://fedoranews.org/cms/node/2507 vendor-advisoryx_refsource_FEDORA
- http://fedoranews.org/cms/node/2537 vendor-advisoryx_refsource_FEDORA
- http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc vendor-advisoryx_refsource_NETBSD
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 vendor-advisoryx_refsource_HP
- http://lists.apple.com/archives/security-announce/2007/May/msg00004.html vendor-advisoryx_refsource_APPLE
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052018.html mailing-listx_refsource_FULLDISC
- http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html vendor-advisoryx_refsource_SUSE
- http://marc.info/?l=bind-announce&m=116968519321296&w=2 mailing-listx_refsource_MLIST
- http://secunia.com/advisories/23904 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/23924 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/23943 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/23972 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/23974 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/23977 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24014 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24048 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24054 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24129 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24203 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24930 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24950 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25402 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25649 third-party-advisoryx_refsource_SECUNIA
- http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc vendor-advisoryx_refsource_FREEBSD
- http://security.gentoo.org/glsa/glsa-200702-06.xml vendor-advisoryx_refsource_GENTOO
- http://securitytracker.com/id?1017561 vdb-entryx_refsource_SECTRACK
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157 vendor-advisoryx_refsource_SLACKWARE
- http://www.isc.org/index.pl?/sw/bind/bind-security.php x_refsource_CONFIRM
- http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8 x_refsource_CONFIRMPatch
- http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4 x_refsource_CONFIRMPatch
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:030 vendor-advisoryx_refsource_MANDRIVA
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html vendor-advisoryx_refsource_OPENPKG
- http://www.redhat.com/support/errata/RHSA-2007-0057.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/archive/1/458066/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/22229 vdb-entryx_refsource_BID
- http://www.trustix.org/errata/2007/0005 vendor-advisoryx_refsource_TRUSTIX
- http://www.ubuntu.com/usn/usn-418-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vupen.com/english/advisories/2007/0349 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/1401 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/1939 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2163 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2315 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2007-0493 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=230003 Issue Tracking
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 x_refsource_CONFIRM
- https://issues.rpath.com/browse/RPL-989 x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2007-0493
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9614 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2007-0493
- https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 vendor-advisoryx_refsource_HP
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jan 25, 2007
Updated Aug 7, 2024
Reserved Jan 25, 2007
Link CVE-2007-0493
CISA Vulnrichment
Updated n/a