CVE-2024-1488
High
Description
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
SeverityHigh
CVSS8.0
Exploit probability—
Product
Fedoraproject Unbound
PublishedFeb 15, 2024
First seenFeb 15, 2024
Weakness typeCWE-276CWE-276
How to fix
Update
- fedoraproject unbound1.19.1-2.fc40 or later
Vendor advisories
- access.redhat.com/errata/RHSA-2024:1750
- access.redhat.com/errata/RHSA-2024:1751
- access.redhat.com/errata/RHSA-2024:1780
- access.redhat.com/errata/RHSA-2024:1801
- access.redhat.com/errata/RHSA-2024:1802
- access.redhat.com/errata/RHSA-2024:1804
- access.redhat.com/errata/RHSA-2024:2587
- access.redhat.com/errata/RHSA-2024:2696
- access.redhat.com/errata/RHSA-2025:0837
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject unbound | v < 1.19.1-2.fc40 | 1.19.1-2.fc40 |
| redhat codeready_linux_builder | 9.0 | — |
| redhat codeready_linux_builder_eus | 9.2, 9.4 | — |
| redhat codeready_linux_builder_eus_for_power_little_endian | 9.0_ppc64le, 9.2_ppc64le | — |
| redhat codeready_linux_builder_for_arm64 | 9.0_aarch64, 9.2_aarch64 | — |
| redhat codeready_linux_builder_for_arm64_eus | 9.4_aarch64 | — |
| redhat codeready_linux_builder_for_ibm_z_systems | 9.0_s390x, 9.2_s390x | — |
| redhat codeready_linux_builder_for_ibm_z_systems_eus | 9.4_s390x | — |
| redhat enterprise_linux | 8.0, 9.0 | — |
| redhat enterprise_linux_eus | 8.6, 8.8, 9.2, 9.4 | — |
| redhat enterprise_linux_for_arm_64 | 8.0_aarch64, 9.0_aarch64, 9.2_aarch64 | — |
| redhat enterprise_linux_for_arm_64_eus | 8.6_aarch64, 8.8_aarch64, 9.4_aarch64 | — |
| redhat enterprise_linux_for_ibm_z_systems | 8.0_s390x, 9.0_s390x, 9.2_s390x | — |
| redhat enterprise_linux_for_ibm_z_systems_eus | 8.6_s390x, 8.8_s390x, 9.4_s390x | — |
| redhat enterprise_linux_for_power_little_endian | 8.0_ppc64le, 9.0_ppc64le, 9.2_ppc64le | — |
| redhat enterprise_linux_for_power_little_endian_eus | 8.6_ppc64le, 8.8_ppc64le, 9.4_ppc64le | — |
| redhat enterprise_linux_server_aus | 8.2, 8.4, 8.6, 9.2, 9.4 | — |
| redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | 8.2_ppc64le, 8.4_ppc64le, 8.6_ppc64le, 8.8_ppc64le, 9.2_ppc64le, 9.4_ppc64le | — |
| redhat enterprise_linux_server_tus | 8.2, 8.4, 8.6, 8.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.