Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-43167
HistoryAug 12, 2024 - 12:00 a.m.

CVE-2024-43167

2024-08-1200:00:00
ubuntu.com
ubuntu.com
1
null pointer dereference
ub_ctx_set_fwd
unix

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

AI Score

4.2

Confidence

High

EPSS

0

Percentile

16.3%

A NULL pointer dereference flaw was found in the ub_ctx_set_fwd function in
Unbound. This issue could allow an attacker who can invoke specific
sequences of API calls to cause a segmentation fault. When certain API
functions such as ub_ctx_set_fwd and ub_ctx_resolvconf are called in a
particular order, the program attempts to read from a NULL pointer, leading
to a crash. This issue can result in a denial of service by causing the
application to terminate unexpectedly.

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

AI Score

4.2

Confidence

High

EPSS

0

Percentile

16.3%