CVE-2024-43168

Public on 2024-08-09

Modified on 2024-08-09

Description

unbound: Heap-Buffer-Overflow in Unbound

Severity

Low

CVSS v3 Base Score

2.8

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory	Status
Amazon Linux 1	unbound			No Fix Planned
Amazon Linux 2 - Core	unbound			Pending Fix
Amazon Linux 2 - Unbound1.13 Extra	unbound			Pending Fix
Amazon Linux 2 - Unbound1.17 Extra	unbound			Pending Fix
Amazon Linux 2023	unbound	2024-11-13	ALAS2023-2024-760	Fixed

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	2.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
NVD	CVSSv3	4.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

References

Red Hat: CVE-2024-43168 Mitre: CVE-2024-43168