A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
CVE-2024-1488
CVSS base score
8.0 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-276
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Affected products
fedoraproject unbound
redhat codeready linux builder
redhat codeready linux builder eus
redhat codeready linux builder eus for power little endian
redhat codeready linux builder for arm64
redhat codeready linux builder for arm64 eus
redhat codeready linux builder for ibm z systems
redhat codeready linux builder for ibm z systems eus
redhat enterprise linux
redhat enterprise linux eus
References
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com
- access.redhat.com Third Party Advisory