VDB
BDU%3A2024-01923
BDU%3A2024-01923
PUBLISHED
CVSS 7.5 HIGH
Уязвимость DNS-сервера Unbound, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ООО «Ред Софт», АО «ИВК», Stichting NLnet Labs | РЕД ОС (запись в едином реестре российских программ №3751), АЛЬТ СП 10, Unbound | |
| NLnet Labs | Unbound | 1.18.0 |
| nlnetlabs | unbound | 1.18.0 |
Timeline
- Mar 7, 2024 CVE Published
- Mar 7, 2024 PoC Published
- Mar 7, 2024 PoC Published
- Mar 7, 2024 PoC Published
- Mar 8, 2024 PoC Published
- Apr 22, 2024 CVE Updated
- Aug 13, 2024 PoC Published
References
- https://security.snyk.io/vuln/SNYK-UNMANAGED-UNBOUND-6420119 url
- https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-1931.txt url
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4VCBRQ7KMSIGBQ6A4SBL5PF326DIJIIV/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B2JUIFPA7H75Q2W3VXW2TUNHK6NVGOX4/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBR4H7RCVMJ6H76S4LLRSY5EBFTYWGXK/ url
- https://lists.freebsd.org/archives/freebsd-security/2024-July/000283.html url
- https://security.netapp.com/advisory/ntap-20240705-0006/ url