NULL pointer dereference in Unbound - CVE-2024-43167

Vulnerability identifier: #VU96082

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-43167

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the ub_ctx_set_fwd() function. A remote attacker can send specially crafted request to the server and perform a denial of service (DoS) attack.

Unbound
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Micro
Ubuntu
SUSE Package Hub 15
Basesystem Module
openSUSE Leap
openEuler
Anolis OS
SmartFabric Storage Software
unbound (Ubuntu package)
unbound-host (Ubuntu package)
libunbound2 (Ubuntu package)
libunbound8 (Ubuntu package)
python3-unbound
unbound
unbound-libs
unbound-help
unbound-devel
unbound-debugsource
unbound-debuginfo
unbound-anchor
unbound-utils
unbound-python
unbound-python-debuginfo
libunbound8-debuginfo
libunbound8
unbound-anchor-debuginfo
unbound-munin
libunbound-devel-mini-debugsource
libunbound-devel-mini
libunbound-devel-mini-debuginfo

Install update from vendor's website.

Unbound - update to 1.21.0
SmartFabric Storage Software - update to 1.4.3
unbound (Ubuntu package) - addressed in versions Ubuntu Pro, 1.9.4-2ubuntu1.8, 1.13.1-1ubuntu5.7, 1.19.2-1ubuntu3.2
unbound-host (Ubuntu package) - addressed in versions Ubuntu Pro, 1.9.4-2ubuntu1.8, 1.13.1-1ubuntu5.7, 1.19.2-1ubuntu3.2
libunbound2 (Ubuntu package) - update to Ubuntu Pro
libunbound8 (Ubuntu package) - addressed in versions 1.9.4-2ubuntu1.8, 1.13.1-1ubuntu5.7, 1.19.2-1ubuntu3.2
python3-unbound - update to 1.13.2-12
unbound - update to 1.13.2-12
unbound-libs - update to 1.13.2-12
unbound-help - update to 1.13.2-12
unbound-devel - update to 1.13.2-12
unbound-debugsource - update to 1.13.2-12
unbound-debuginfo - update to 1.13.2-12
unbound - update to 1.17.1-7
python3-unbound - update to 1.17.1-7
unbound-anchor - update to 1.17.1-7
unbound-devel - update to 1.17.1-7
unbound-libs - update to 1.17.1-7
unbound-utils - update to 1.17.1-7
unbound-devel - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
unbound-anchor - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
unbound-debuginfo - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
unbound-python - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
unbound-python-debuginfo - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
unbound-debugsource - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
libunbound8-debuginfo - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
libunbound8 - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
unbound - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
unbound-anchor-debuginfo - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
unbound-munin - addressed in versions 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1
libunbound-devel-mini-debugsource - update to 1.20.0-150600.23.6.1
libunbound-devel-mini - update to 1.20.0-150600.23.6.1
libunbound-devel-mini-debuginfo - update to 1.20.0-150600.23.6.1

• https://access.redhat.com/security/cve/CVE-2024-43167
• https://bugzilla.redhat.com/show_bug.cgi?id=2303456
• https://github.com/NLnetLabs/unbound/issues/1072
• https://github.com/NLnetLabs/unbound/pull/1073/files

• Denial of service in Unbound
• openEuler update for unbound
• SUSE update for unbound
• SUSE update for unbound
• Ubuntu update for unbound
• Dell SmartFabric Storage Software update for third-party components
• Anolis OS update for unbound