Site icon API Security Blog

EulerOS 2.0 SP11 : unbound (EulerOS-SA-2024-2595)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference flaw was found in the ub_ctx_set_fwd function in Unbound. This issue could allow an attacker who can invoke specific sequences of API calls to cause a segmentation fault. When certain API functions such as ub_ctx_set_fwd and ub_ctx_resolvconf are called in a particular order, the program attempts to read from a NULL pointer, leading to a crash. This issue can result in a denial of service by causing the application to terminate unexpectedly.(CVE-2024-43167) Tenable has extracted the preceding description block directly from the EulerOS unbound security advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version…Read More

Exit mobile version