Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-43168
HistoryAug 12, 2024 - 12:00 a.m.

CVE-2024-43168

2024-08-1200:00:00
ubuntu.com
ubuntu.com
24
cve-2024-43168
unix
heap-buffer-overflow
cfg_mark_ports

CVSS3

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

5.1

Confidence

High

EPSS

0

Percentile

16.3%

A heap-buffer-overflow flaw was found in the cfg_mark_ports function within
Unbound’s config_file.c, which can lead to memory corruption. This issue
could allow an attacker with local access to provide specially crafted
input, potentially causing the application to crash or allowing arbitrary
code execution. This could result in a denial of service or unauthorized
actions on the system.

CVSS3

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

5.1

Confidence

High

EPSS

0

Percentile

16.3%