Red Hat Security AdvisoryRHSA-2024:1780
unbound security and bug fix update
Released 2024-04-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.2) unbound-devel-1.16.2-3.el9_2.4
- Red Hat Enterprise Linux AppStream EUS (v.9.2) python3-unbound-1.16.2-3.el9_2.4, unbound-1.16.2-3.el9_2.4, unbound-libs-1.16.2-3.el9_2.4
Fixes 1 record
Priority LOW 35
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration.
CVSS 3.1HIGH 8.0· Local · No auth · No interaction · EPSS 0.00321 · Published 2024-02-15 · Partial fix · 1.16.2-5.el8_9.6, 1.16.2-5.8.el8_10 +7 CWE-276