CVE-2024-1488

Katalog CVE

CVSS 7.3 · High EPSS 0,32%

Kerentanan Incorrect Default Permissions pada fedoraproject unbound, redhat codeready linux builder +17 lainnya. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.

Rincian

Terbit di NVD

15 Februari 2024

Terakhir diubah

6 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-276: Incorrect Default Permissions

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 23,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2264183 issue tracking · patch
• https://access.redhat.com/errata/RHSA-2024:1750 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1751 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1780 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1801 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1802 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1804 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:2587 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:2696 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2024-1488 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:0837