CVE-2024-1488
HIGH severity · CVSS 8 · CWE-276
8CVSS HIGH
Summary
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredNone
User interactionNone
Confidentiality impactLow
Integrity impactHigh
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- https://access.redhat.com/errata/RHSA-2024:1750Advisory
- https://access.redhat.com/errata/RHSA-2024:1751Advisory
- https://access.redhat.com/errata/RHSA-2024:1780Advisory
- https://access.redhat.com/errata/RHSA-2024:1801Advisory
- https://access.redhat.com/errata/RHSA-2024:1802Advisory
- https://access.redhat.com/errata/RHSA-2024:1804Advisory
- https://access.redhat.com/errata/RHSA-2024:2587Advisory
- https://access.redhat.com/errata/RHSA-2024:2696Advisory