CVE-2024-1488High· 8.0▾ TwilightA vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.3%
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
unbound < 1.19.1-2.fc40codeready_linux_builder = 9.0codeready_linux_builder_eus = 9.2codeready_linux_builder_eus = 9.4codeready_linux_builder_eus_for_power_little_endian = 9.0_ppc64lecodeready_linux_builder_eus_for_power_little_endian = 9.2_ppc64lecodeready_linux_builder_for_arm64 = 9.0_aarch64codeready_linux_builder_for_arm64 = 9.2_aarch64codeready_linux_builder_for_arm64_eus = 9.4_aarch64codeready_linux_builder_for_ibm_z_systems = 9.0_s390xcodeready_linux_builder_for_ibm_z_systems = 9.2_s390xcodeready_linux_builder_for_ibm_z_systems_eus = 9.4_s390xenterprise_linux = 8.0enterprise_linux = 9.0enterprise_linux_eus = 8.6enterprise_linux_eus = 8.8enterprise_linux_eus = 9.2enterprise_linux_eus = 9.4enterprise_linux_for_arm_64 = 8.0_aarch64enterprise_linux_for_arm_64 = 9.0_aarch64enterprise_linux_for_arm_64 = 9.2_aarch64enterprise_linux_for_arm_64_eus = 8.6_aarch64enterprise_linux_for_arm_64_eus = 8.8_aarch64enterprise_linux_for_arm_64_eus = 9.4_aarch64enterprise_linux_for_ibm_z_systems = 8.0_s390xenterprise_linux_for_ibm_z_systems = 9.0_s390xenterprise_linux_for_ibm_z_systems = 9.2_s390xenterprise_linux_for_ibm_z_systems_eus = 8.6_s390xenterprise_linux_for_ibm_z_systems_eus = 8.8_s390xenterprise_linux_for_ibm_z_systems_eus = 9.4_s390xenterprise_linux_for_power_little_endian = 8.0_ppc64leenterprise_linux_for_power_little_endian = 9.0_ppc64leenterprise_linux_for_power_little_endian = 9.2_ppc64leenterprise_linux_for_power_little_endian_eus = 8.6_ppc64leenterprise_linux_for_power_little_endian_eus = 8.8_ppc64leenterprise_linux_for_power_little_endian_eus = 9.4_ppc64leenterprise_linux_server_aus = 8.2enterprise_linux_server_aus = 8.4enterprise_linux_server_aus = 8.6enterprise_linux_server_aus = 9.2enterprise_linux_server_aus = 9.4enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 8.2_ppc64leenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 8.4_ppc64leenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 8.6_ppc64leenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 8.8_ppc64leenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 9.2_ppc64leenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 9.4_ppc64leenterprise_linux_server_tus = 8.2enterprise_linux_server_tus = 8.4enterprise_linux_server_tus = 8.6enterprise_linux_server_tus = 8.8Upgrade past the affected range:
unbound 1.19.1-2.fc40Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109125Medium· 5.3Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'
CVE-2026-96405Medium· 5.3Aggregate DNS name chained pointer decompression work leads to degradation of service.
CVE-2026-35501Low· 3.7Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.
CVE-2026-50106Medium· 6.5Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.
CVE-2026-97206High· 7.5DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.
CVE-2019-16866High· 7.5Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query