Lucene search

K
redhatRedHatRHSA-2007:0057
HistoryMar 14, 2007 - 12:00 a.m.

(RHSA-2007:0057) Moderate: bind security update

2007-03-1400:00:00
access.redhat.com
9

0.971 High

EPSS

Percentile

99.8%

ISC BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols.

A flaw was found in the way BIND processed certain DNS query responses. On
servers that had enabled DNSSEC validation, this could allow a remote
attacker to cause a denial of service. (CVE-2007-0494)

A use-after-free flaw was found in BIND. On servers that have recursion
enabled, this could allow a remote attacker to cause a denial of service.
(CVE-2007-0493)

Users of BIND are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.