REDHAT-BUG-2303462: Low severity libunbound vulnerability

Q: What is the severity of REDHAT-BUG-2303462?

The severity of REDHAT-BUG-2303462 has not been explicitly stated, but it involves a heap-buffer-overflow vulnerability that can lead to potential memory corruption and application crashes.

Q: How do I fix REDHAT-BUG-2303462?

To fix REDHAT-BUG-2303462, upgrade the Unbound software to a version newer than 1.19.3.

Q: Which versions of Unbound are affected by REDHAT-BUG-2303462?

Unbound versions up to and including 1.19.3 are affected by REDHAT-BUG-2303462.

Q: What kind of vulnerability is REDHAT-BUG-2303462?

REDHAT-BUG-2303462 is a heap-buffer-overflow vulnerability.

Q: What can happen if REDHAT-BUG-2303462 is exploited?

Exploitation of REDHAT-BUG-2303462 can result in memory corruption, causing the application to crash.

Published Aug 7, 2024

Updated

Unbound version <= 1.19.3 contains a heap-buffer-overflow vulnerability. The flaw occurs in the cfgmarkports function within the configfile.c file, leading to potential memory corruption. This issue can be triggered when processing certain inputs, causing the application to crash or potentially allowing an attacker to execute arbitrary code.

Affected Software

1 affected component

Nlnet Labs Unbound<=1.19.3

Event History

Aug 7, 2024

Data Sourced

via Red Hat·02:06 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2303462?

The severity of REDHAT-BUG-2303462 has not been explicitly stated, but it involves a heap-buffer-overflow vulnerability that can lead to potential memory corruption and application crashes.

How do I fix REDHAT-BUG-2303462?

To fix REDHAT-BUG-2303462, upgrade the Unbound software to a version newer than 1.19.3.

Which versions of Unbound are affected by REDHAT-BUG-2303462?