Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

BIND9 may crash, stopping DNS service

CVE-2007-0493 · published 19 years ago
Summary

The BIND9 DNS server software on Debian can crash when it mishandles certain network requests. This causes the name service to stop, which can interrupt internet access for users and applications. Update to the latest BIND9 package or apply the vendor’s recommended patch to keep the service running.

What to do
  • Update debian bind9 to version 1:9.3.4-2.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian bind9 < 1:9.3.4-2
Fix: upgrade to 1:9.3.4-2
Debian:13 debian bind9 < 1:9.3.4-2
Fix: upgrade to 1:9.3.4-2
Debian:14 debian bind9 < 1:9.3.4-2
Fix: upgrade to 1:9.3.4-2
– isc bind 9.3.0
9.3.1
9.3.2
9.4.0
9.5.0
cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*
Original advisory text
Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of servic...
Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a freed fetch context."
References
Severity
7.8 High
Exploitation
13% chance of attack within 30 days
Timeline
Published25 Jan 2007
Updated4 Nov 2026
First seen28 Sep 2026
Sources
DEBIAN-CVE-2007-0493 · OSV
CVE-2007-0493 · NVD
Track software like this
Free during beta