Red Hat Security Advisory

RHSA-2024:1802

unbound security update

Released 2024-04-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.8) python3-unbound-1.16.2-5.el8_8.4, unbound-1.16.2-5.el8_8.4, unbound-devel-1.16.2-5.el8_8.4 +1

Fixes 1 record

TI-2024-01390 CVE-2024-1488 · GHSA-35qh-7f6c-rjf7

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

LOW 35

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.00321 Published 2024-02-15 Partial fix · 1.16.2-5.el8_9.6, 1.16.2-5.8.el8_10 +7 CWE-276