CVE-2024-1488 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
An unprivileged local attacker can modify Unbound runtime configuration via localhost, enabling DNS query tracking and potential service disruption.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-1488?
CVE-2024-1488 is a high-severity missing authorization vulnerability in Redhat Enterprise Linux, published on 15 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
Weakness: CWE-276
Which versions are affected by CVE-2024-1488?
It affects 19 products.
Linux distribution packages (40)
python3-unbound AlmaLinux:8 | All versions | 1.16.2-5.el8_9.6 |
unbound AlmaLinux:8 | All versions | 1.16.2-5.el8_9.6 |
unbound-devel AlmaLinux:8 | All versions | 1.16.2-5.el8_9.6 |
unbound-libs AlmaLinux:8 | All versions | 1.16.2-5.el8_9.6 |
python3-unbound AlmaLinux:9 | All versions | 1.16.2-3.el9_3.5 |
unbound AlmaLinux:9 | All versions | 1.16.2-3.el9_3.5 |
unbound-devel AlmaLinux:9 | All versions | 1.16.2-3.el9_3.5 |
unbound-libs AlmaLinux:9 | All versions | 1.16.2-3.el9_3.5 |
python3-unbound Red Hat:enterprise_linux:8::appstream | All versions | 0:1.16.2-5.el8_9.6 |
python3-unbound-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:1.16.2-5.el8_9.6 |
unbound Red Hat:enterprise_linux:8::appstream | All versions | 0:1.16.2-5.el8_9.6 |
unbound-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:1.16.2-5.el8_9.6 |
unbound-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:1.16.2-5.el8_9.6 |
unbound-devel Red Hat:enterprise_linux:8::appstream | All versions | 0:1.16.2-5.el8_9.6 |
unbound-libs Red Hat:enterprise_linux:8::appstream | All versions | 0:1.16.2-5.el8_9.6 |
unbound-libs-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:1.16.2-5.el8_9.6 |
python3-unbound Red Hat:enterprise_linux:9::appstream | All versions | 0:1.16.2-3.el9_3.5 |
python3-unbound-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:1.16.2-3.el9_3.5 |
unbound Red Hat:enterprise_linux:9::appstream | All versions | 0:1.16.2-3.el9_3.5 |
unbound-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:1.16.2-3.el9_3.5 |
unbound-debugsource Red Hat:enterprise_linux:9::appstream | All versions | 0:1.16.2-3.el9_3.5 |
unbound-libs Red Hat:enterprise_linux:9::appstream | All versions | 0:1.16.2-3.el9_3.5 |
unbound-libs-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:1.16.2-3.el9_3.5 |
python3-unbound-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 0:1.16.2-3.el9_3.5 |
unbound-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 0:1.16.2-3.el9_3.5 |
unbound-debugsource Red Hat:enterprise_linux:9::crb | All versions | 0:1.16.2-3.el9_3.5 |
unbound-devel Red Hat:enterprise_linux:9::crb | All versions | 0:1.16.2-3.el9_3.5 |
unbound-libs-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 0:1.16.2-3.el9_3.5 |
python3-unbound Red Hat:rhel_eus:8.8::appstream | All versions | 0:1.16.2-5.el8_8.4 |
python3-unbound-debuginfo Red Hat:rhel_eus:8.8::appstream | All versions | 0:1.16.2-5.el8_8.4 |
unbound Red Hat:rhel_eus:8.8::appstream | All versions | 0:1.16.2-5.el8_8.4 |
unbound-debuginfo Red Hat:rhel_eus:8.8::appstream | All versions | 0:1.16.2-5.el8_8.4 |
unbound-debugsource Red Hat:rhel_eus:8.8::appstream | All versions | 0:1.16.2-5.el8_8.4 |
unbound-devel Red Hat:rhel_eus:8.8::appstream | All versions | 0:1.16.2-5.el8_8.4 |
unbound-libs Red Hat:rhel_eus:8.8::appstream | All versions | 0:1.16.2-5.el8_8.4 |
unbound-libs-debuginfo Red Hat:rhel_eus:8.8::appstream | All versions | 0:1.16.2-5.el8_8.4 |
python3-unbound Red Hat:rhel_eus:9.2::appstream | All versions | 0:1.16.2-3.el9_2.4 |
python3-unbound-debuginfo Red Hat:rhel_eus:9.2::appstream | All versions | 0:1.16.2-3.el9_2.4 |
unbound Red Hat:rhel_eus:9.2::appstream | All versions | 0:1.16.2-3.el9_2.4 |
unbound-debuginfo Red Hat:rhel_eus:9.2::appstream | All versions | 0:1.16.2-3.el9_2.4 |
Products include Fedoraproject Unbound, Redhat Codeready Linux Builder, Redhat Codeready Linux Builder Eus, Redhat Codeready Linux Builder Eus for Power Little Endian, Redhat Codeready Linux Builder for Arm64, Redhat Codeready Linux Builder for Arm64 Eus and 13 more.
How do I fix CVE-2024-1488?
Apply the vendor's patch.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2024-1488 being exploited?
There is no known exploitation of CVE-2024-1488 in the wild and no public exploit code.
Sources
Also known as ALSA-2024:1750, ALSA-2024:1751, CLSA-2025-1738170016, CLSA-2026-1768395381, GHSA-35qh-7f6c-rjf7, RHSA-2024:1750 and 5 more.