CVE-2024-43167

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

AZL-47779 CVE-2024-43167 affecting package unbound for versions less than 1.19.1-3

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

AZL-47771 CVE-2024-43167 affecting package unbound for versions less than 1.19.1-4

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

DEBIAN-CVE-2024-43167

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

CVE-2024-43167

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

UBUNTU-CVE-2024-43168

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

UBUNTU-CVE-2024-43167

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

CVE-2024-43168 Unbound: heap-buffer-overflow in unbound

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

CVE-2024-43168 Unbound: heap-buffer-overflow in unbound

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

CVE-2024-43168

CVE-2024-43168 affects Unbound: a heap-buffer-overflow in cfg_mark_ports (config_file.c) may allow memory corruption. With local access, an attacker can provide crafted input, potentially crashing the app or enabling arbitrary code execution (DoS/unauthorized actions). The descriptor includes a d...

CVE-2024-43168

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

CVE-2024-43167 Unbound: null pointer dereference in unbound

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

CVE-2024-43167

CVE-2024-43167 describes a NULL pointer dereference in Unbound’s ub_ctx_set_fwd, which can lead to a crash/DoS when specific API call orders are used. Connected documents confirm this affects unbound across multiple distributions and versions. Debian LTS fixes the issue in unbound 1.13.1-1+deb11u...

CVE-2024-43167

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

CVE-2024-43167 Unbound: null pointer dereference in unbound

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

SUSE CVE-2024-43168

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

PT-2024-5866 · Nlnet +5 · Unbound +5

Name of the Vulnerable Software and Affected Versions: Unbound affected versions not specified Description: A NULL pointer dereference flaw was found in the ub ctx set fwd function in Unbound. This issue could allow an attacker who can invoke specific sequences of API calls to cause a segmentatio...

PT-2024-5867 · Nlnet +4 · Unbound +4

Name of the Vulnerable Software and Affected Versions: Unbound affected versions not specified Description: A heap-buffer-overflow flaw was found in the cfg mark ports function within Unbound's config file.c, which can lead to memory corruption. This issue could allow an attacker with local acces...

NLnet Unbound 安全漏洞

NLnet Unbound is an open source DNS server from the Dutch NLnet team. NLnet Unbound has a security vulnerability that originates from a heap buffer overflow vulnerability in the function cfgmarkports in the file util/configfile.c. The vulnerability is caused by a heap buffer overflow vulnerabilit...

NLnet Unbound 代码问题漏洞

NLnet Unbound is an open source DNS server from the Dutch NLnet team. A code issue vulnerability exists in NLnet Unbound, which stems from a null pointer dereference issue in function ubctxsetfwd in file libunbound/libunbound.c...