CVE-2024-1488

CVE-2024-1488 is a high-severity vulnerability in Redhat Codeready Linux Builder with a CVSS 3.x base score of 8.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-276.

Key facts

Description

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.

Frequently asked questions

What is CVE-2024-1488?
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
How severe is CVE-2024-1488?
CVE-2024-1488 has a CVSS 3.x base score of 8.0, rated high severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity high, and availability high.
Is CVE-2024-1488 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (24th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-1488?
CVE-2024-1488 primarily affects Redhat Codeready Linux Builder. In total, 51 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2024-1488?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2024-1488 have an EU (EUVD) identifier?
Yes. CVE-2024-1488 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-17236.
When was CVE-2024-1488 published?
CVE-2024-1488 was published on 2024-02-15 and last updated on 2026-06-17.

References

Affected products (51)

More vulnerabilities in Redhat Codeready Linux Builder

All CVEs affecting Redhat Codeready Linux Builder →

Other CWE-276 (Incorrect Default Permissions) vulnerabilities

Browse all CWE-276 (Incorrect Default Permissions) vulnerabilities →