Riskcovery

CVE-2024-1488

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

State
Published
Severity
8.0 High
Published
Feb 15, 2024
Updated
Aug 6, 2026
Reserved
Feb 14, 2024

Read the record on cve.org

Description

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.

Scores

CVSSScoreVectorSource
3.18.0 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:Hredhat

Weaknesses

  • CWE-276 Incorrect Default Permissions

Affected Products

ProductVersions
unbound
  • 1.16.2Affected
Red Hat Enterprise Linux 8Red Hat
  • 0:1.16.2-5.el8_9.6 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:1.16.2-5.8.el8_10 and laterNot affected
Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat
  • 0:1.7.3-12.el8_2.1 and laterNot affected
Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceRed Hat
  • 0:1.7.3-12.el8_2.1 and laterNot affected
Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsRed Hat
  • 0:1.7.3-12.el8_2.1 and laterNot affected
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat
  • 0:1.7.3-15.el8_4.1 and laterNot affected
Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat
  • 0:1.7.3-15.el8_4.1 and laterNot affected
Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat
  • 0:1.7.3-15.el8_4.1 and laterNot affected
Red Hat Enterprise Linux 8.6 Extended Update SupportRed Hat
  • 0:1.7.3-17.el8_6.4 and laterNot affected
Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat
  • 0:1.16.2-5.el8_8.4 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:1.16.2-3.el9_3.5 and laterNot affected
Red Hat Enterprise Linux 9.0 Extended Update SupportRed Hat
  • 0:1.13.1-13.el9_0.4 and laterNot affected
Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat
  • 0:1.16.2-3.el9_2.4 and laterNot affected
Red Hat Enterprise Linux 10Red Hat
    Red Hat Enterprise Linux 6Red Hat
      Red Hat Enterprise Linux 7Red Hat

        References

        Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.