unbound-1.16.2-5.el8_9.6
エラータID: AXSA:2024-7684:04
リリース日:
2024/04/15 Monday - 15:56
題名:
unbound-1.16.2-5.el8_9.6
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Unbound には、デフォルトの権限設定の不備により unbound
グループ以外の利用者が unbound サービスの一部の設定値を変更
できてしまう問題があるため、ローカルの攻撃者により、
localhost:8953 への接続を介して、情報の漏洩 (ローカルリゾルバー
によって転送されたクエリの漏洩) を可能とする脆弱性が存在します。
(CVE-2024-1488)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2024-1488
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
追加情報:
N/A
ダウンロード:
SRPMS
- unbound-1.16.2-5.el8_9.6.src.rpm
MD5: be0d95666003fe3e06fdef1fa9e3651c
SHA-256: 8ece51a1898431b6aeb0df869b96298ff147e8fbeeae812d65fac339f797f36a
Size: 6.01 MB
Asianux Server 8 for x86_64
- python3-unbound-1.16.2-5.el8_9.6.x86_64.rpm
MD5: 83e963f373aa4906d2c851ba47f4f74f
SHA-256: d12aa7ad577f3a6c3d9d3ed1eab86a8d822310e15f3628ab632060b072feee1c
Size: 129.20 kB - unbound-1.16.2-5.el8_9.6.x86_64.rpm
MD5: 0456dfce3b9b1b8021c3063c5fa3b197
SHA-256: bf840a800d373811dd1a5d55c0b8fa96de0315919cd418dc3e383c635511bb67
Size: 1.00 MB - unbound-devel-1.16.2-5.el8_9.6.i686.rpm
MD5: 4f0dc796682f6f20a80bf3c87493aa0a
SHA-256: 4e0f62b0e8e21c222912a7e2bd1350486e856f0b3d47a2ea5f45aacdadde4395
Size: 56.62 kB - unbound-devel-1.16.2-5.el8_9.6.x86_64.rpm
MD5: 1716d06074def45f1a90a5f9ab237796
SHA-256: 01f320d3fa9d02bc2751e3e09a1b4d7c9dd2eb79a84db3f563a461bb21e94a7b
Size: 56.60 kB - unbound-libs-1.16.2-5.el8_9.6.i686.rpm
MD5: c90e145f0963c337a39a66dd06ae3561
SHA-256: 759b0f3dec2dddfe3a44ad91930ccfbb07d0360d2026ed65f439e43b0d7a44cb
Size: 616.23 kB - unbound-libs-1.16.2-5.el8_9.6.x86_64.rpm
MD5: 07629e0c6c93bfea27f6298feffda0c2
SHA-256: 5fb2d320347058ff7df2d55d29ea7e336b81be2806300e82c487e938609e261c
Size: 576.07 kB
English