Read the docs
TI-2024-01390 Aliases CVE-2024-1488GHSA-35qh-7f6c-rjf7

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

Priority LOW 35CWE-276Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · High · High
Fix status
Partial Red Hat: 14 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00321 25th percentileScored 2026-11-07
Fix Partial Red Hat: 9 advisoriesRed Hat: 14 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—unbound1.16.2—No fix listedCNA
Red HatRed Hat Enterprise Linux 8—1.16.2-5.el8_9.6Patch availableCNA
Red HatRed Hat Enterprise Linux 8—1.16.2-5.8.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—1.7.3-12.el8_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service—1.7.3-12.el8_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions—1.7.3-12.el8_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—1.7.3-15.el8_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—1.7.3-15.el8_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—1.7.3-15.el8_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—1.7.3-17.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—1.16.2-5.el8_8.4Patch availableCNA
Red HatRed Hat Enterprise Linux 9—1.16.2-3.el9_3.5Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—1.13.1-13.el9_0.4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—1.16.2-3.el9_2.4Patch availableCNA
Red HatRed Hat Enterprise Linux 10——No fix listedCNA
Red HatRed Hat Enterprise Linux 6——Not affectedCNA
Red HatRed Hat Enterprise Linux 7——Not affectedCNA
  • unbound Vendor— Affected 1.16.2 Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.16.2-5.el8_9.6 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.16.2-5.8.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 1.7.3-12.el8_2.1 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.7.3-12.el8_2.1 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.7.3-12.el8_2.1 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.7.3-15.el8_4.1 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.7.3-15.el8_4.1 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.7.3-15.el8_4.1 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 1.7.3-17.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 1.16.2-5.el8_8.4 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.16.2-3.el9_3.5 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 1.13.1-13.el9_0.4 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 1.16.2-3.el9_2.4 Patch available CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA

CPE configurations NVD · 51

CPEVersionsRoleVendor
cpe:2.3:a:fedoraproject:unbound:*:*:*:*:*:*:*:*before 1.19.1-2.fc40VulnerableFedoraproject
cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.4:*:*:*:*:*:*:*9.4VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*9.0_ppc64leVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian:9.2_ppc64le:*:*:*:*:*:*:*9.2_ppc64leVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.0_aarch64:*:*:*:*:*:*:*9.0_aarch64VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.2_aarch64:*:*:*:*:*:*:*9.2_aarch64VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4_aarch64:*:*:*:*:*:*:*9.4_aarch64VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*9.0_s390xVulnerableRed Hat
  • cpe:2.3:a:fedoraproject:unbound:*:*:*:*:*:*:*:* Versions before 1.19.1-2.fc40 Vulnerable ·Fedoraproject
  • cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_eus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian:9.2_ppc64le:*:*:*:*:*:*:* Versions 9.2_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.0_aarch64:*:*:*:*:*:*:* Versions 9.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.2_aarch64:*:*:*:*:*:*:* Versions 9.2_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4_aarch64:*:*:*:*:*:*:* Versions 9.4_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
Show 41 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*9.2_s390xVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*9.4_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*9.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*8.0_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*9.0_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2_aarch64:*:*:*:*:*:*:*9.2_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:*8.6_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*8.8_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:*9.4_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*8.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*9.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*9.2_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*8.6_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*8.8_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*9.4_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*8.0_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*9.0_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.2_ppc64le:*:*:*:*:*:*:*9.2_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:*8.6_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*8.8_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*9.4_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*9.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2_ppc64le:*:*:*:*:*:*:*8.2_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4_ppc64le:*:*:*:*:*:*:*8.4_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6_ppc64le:*:*:*:*:*:*:*8.6_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.8_ppc64le:*:*:*:*:*:*:*8.8_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*9.2_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:*9.4_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* Versions 9.4_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:* Versions 8.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* Versions 9.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2_aarch64:*:*:*:*:*:*:* Versions 9.2_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:* Versions 8.6_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:* Versions 8.8_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:* Versions 9.4_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* Versions 8.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:* Versions 8.6_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:* Versions 8.8_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* Versions 9.4_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* Versions 8.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.2_ppc64le:*:*:*:*:*:*:* Versions 9.2_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:* Versions 8.6_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:* Versions 8.8_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* Versions 9.4_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2_ppc64le:*:*:*:*:*:*:* Versions 8.2_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4_ppc64le:*:*:*:*:*:*:* Versions 8.4_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6_ppc64le:*:*:*:*:*:*:* Versions 8.6_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.8_ppc64le:*:*:*:*:*:*:* Versions 8.8_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:* Versions 9.2_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:* Versions 9.4_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat

Remediation

Red Hat 9 advisories

  • RHSA-2025:0837 Released 2025-01-30 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3-unbound-1.16.2-5.8.el8_10, unbound-1.16.2-5.8.el8_10, unbound-devel-1.16.2-5.8.el8_10 +1
  • RHSA-2024:2696 Released 2024-05-06 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) python3-unbound-1.7.3-12.el8_2.1, unbound-1.7.3-12.el8_2.1, unbound-devel-1.7.3-12.el8_2.1 +1
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) python3-unbound-1.7.3-12.el8_2.1, unbound-1.7.3-12.el8_2.1, unbound-devel-1.7.3-12.el8_2.1 +1
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) python3-unbound-1.7.3-12.el8_2.1, unbound-1.7.3-12.el8_2.1, unbound-devel-1.7.3-12.el8_2.1 +1
  • RHSA-2024:2587 Released 2024-04-30 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) python3-unbound-1.7.3-15.el8_4.1, unbound-1.7.3-15.el8_4.1, unbound-devel-1.7.3-15.el8_4.1 +1
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) python3-unbound-1.7.3-15.el8_4.1, unbound-1.7.3-15.el8_4.1, unbound-devel-1.7.3-15.el8_4.1 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) python3-unbound-1.7.3-15.el8_4.1, unbound-1.7.3-15.el8_4.1, unbound-devel-1.7.3-15.el8_4.1 +1
Show 6 more Red Hat advisories
  • RHSA-2024:1802 Released 2024-04-15 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) python3-unbound-1.16.2-5.el8_8.4, unbound-1.16.2-5.el8_8.4, unbound-devel-1.16.2-5.el8_8.4 +1
  • RHSA-2024:1804 Released 2024-04-15 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) python3-unbound-1.7.3-17.el8_6.4, unbound-1.7.3-17.el8_6.4, unbound-devel-1.7.3-17.el8_6.4 +1
  • RHSA-2024:1801 Released 2024-04-15 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) python3-unbound-1.13.1-13.el9_0.4, unbound-1.13.1-13.el9_0.4, unbound-libs-1.13.1-13.el9_0.4
  • RHSA-2024:1780 Released 2024-04-11 · Red Hat rating Important
    unbound security and bug fix update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) unbound-devel-1.16.2-3.el9_2.4
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) python3-unbound-1.16.2-3.el9_2.4, unbound-1.16.2-3.el9_2.4, unbound-libs-1.16.2-3.el9_2.4
  • RHSA-2024:1751 Released 2024-04-11 · Red Hat rating Important
    unbound security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3-unbound-1.16.2-5.el8_9.6, unbound-1.16.2-5.el8_9.6, unbound-devel-1.16.2-5.el8_9.6 +1
  • RHSA-2024:1750 Released 2024-04-10 · Red Hat rating Important
    unbound security update
    • Red Hat CodeReady Linux Builder (v. 9) unbound-devel-1.16.2-3.el9_3.5
    • Red Hat Enterprise Linux AppStream (v. 9) python3-unbound-1.16.2-3.el9_3.5, unbound-1.16.2-3.el9_3.5, unbound-libs-1.16.2-3.el9_3.5

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2024:1750
Red Hat CodeReady Linux Builder EUS (v.9.2)Fixed RHSA-2024:1780
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:1751, RHSA-2025:0837
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:1750
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2024:2696
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2024:2587
Red Hat Enterprise Linux AppStream E4S (v. 8.2)Fixed RHSA-2024:2696
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2024:2587
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2024:1804
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:1802
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2024:1801
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:1780
Red Hat Enterprise Linux AppStream TUS (v. 8.2)Fixed RHSA-2024:2696
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2024:2587
Not affected: 2 products
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-1488
  2. 2026-10-03 Alias added: GHSA-35qh-7f6c-rjf7

References

Patch 1

Advisory 10

  • TI-2019-06284 Memory corruption in webkitgtk KEVCVSS 3.1HIGH 8.8
  • TI-2023-04522 Glibc: buffer overflow in ld.so leading to privilege escalation KEVCVSS 3.1HIGH 7.8
  • TI-2022-00753 A flaw was found in the way the "flags" member of the new pipe buffer structure was… KEVCVSS 3.1HIGH 7.8
  • TI-2022-00413 Improper authentication in kernel KEVCVSS 3.1HIGH 7.8
  • TI-2021-19843 Out-of-bounds read in Samba CVSS 3.1HIGH 8.8
  • TI-2022-00359 Out-of-bounds write in kernel CVSS 3.1HIGH 8.8
See all 46 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences