| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| unbound | < 1.19.1-2.fc40 | 1.19.1-2.fc40 |
| codeready linux builder | = 9.0 | |
| codeready linux builder eus | = 9.2= 9.4 | |
| codeready linux builder eus for power little endian | = 9.0_ppc64le= 9.2_ppc64le | |
| codeready linux builder for arm64 | = 9.0_aarch64= 9.2_aarch64 | |
| codeready linux builder for arm64 eus | = 9.4_aarch64 | |
| codeready linux builder for ibm z systems | = 9.0_s390x= 9.2_s390x | |
| codeready linux builder for ibm z systems eus | = 9.4_s390x |
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí