unbound-1.16.2-3.el9_3.5
エラータID: AXSA:2024-7682:03
リリース日:
2024/04/15 Monday - 10:38
題名:
unbound-1.16.2-3.el9_3.5
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Unbound には、デフォルトの権限設定の不備により unbound
グループ以外の利用者が unbound サービスの一部の設定値を変更
できてしまう問題があるため、ローカルの攻撃者により、
localhost:8953 への接続を介して、情報の漏洩 (ローカルリゾルバー
によって転送されたクエリの漏洩) を可能とする脆弱性が存在します。
(CVE-2024-1488)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2024-1488
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
追加情報:
N/A
ダウンロード:
SRPMS
- unbound-1.16.2-3.el9_3.5.src.rpm
MD5: 58222c44144702e1eec7e72ca733c364
SHA-256: 06ba7140a57c7c1e4a79fd628f86ef070b3c6480be303a067371dcffc90ec652
Size: 6.00 MB
Asianux Server 9 for x86_64
- python3-unbound-1.16.2-3.el9_3.5.x86_64.rpm
MD5: 09f05d8b46eb467388954c1635166c03
SHA-256: 520994bfba6e795a4950bd7e97c762c9171200b5d6007213bc8023aef0bbf03a
Size: 105.22 kB - unbound-1.16.2-3.el9_3.5.x86_64.rpm
MD5: 9642f765981919b2d1b4661341a4c472
SHA-256: 5f6677d84b2f015a09bc02302f6a0569508b0c427445e5a1ad25261e6a805818
Size: 967.67 kB - unbound-devel-1.16.2-3.el9_3.5.i686.rpm
MD5: aedff86a2b638444267a55cc4ec8f99b
SHA-256: dc176de0a67f31a7276d44e579048906db3bf19b36b570f9e2bb39876d67ef07
Size: 38.42 kB - unbound-devel-1.16.2-3.el9_3.5.x86_64.rpm
MD5: 45f015c6207dc6b8aa482458ba51859f
SHA-256: b9c9a53da16e3991841a20777d84f6a674dabbbb764ab18be0677aa2625db343
Size: 38.40 kB - unbound-libs-1.16.2-3.el9_3.5.i686.rpm
MD5: 990725ef804fd80c0434d62259e09e8d
SHA-256: 9d0036a1923317c6aae9999f9856fb20ac855debd78ba73f716b5800668c8f9f
Size: 573.62 kB - unbound-libs-1.16.2-3.el9_3.5.x86_64.rpm
MD5: b32cf474990a87c05550fb5706ef498c
SHA-256: 18696cb0ae799eefdc29ad1ed5275c3b4ea3cc2fa7d767e8acd43de067120a43
Size: 547.71 kB
English