Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-43168: unbound: Heap-Buffer-Overflow in Unbound CVE-2024-43167: unbound: NULL Pointer Dereference in Unbound
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | python3-unbound | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | python3-unbound-debuginfo | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound-anchor | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound-anchor-debuginfo | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound-debuginfo | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound-debugsource | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound-devel | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound-libs | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound-libs-debuginfo | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound-utils | 0:1.17.1-1.amzn2023.0.7 |
| Amazon Linux · 2023 | unbound-utils-debuginfo | 0:1.17.1-1.amzn2023.0.7 |
Vulnerabilities 2
-
Medium 4.8
Unbound: heap-buffer-overflow in unbound
DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer, NLnet Labs) falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a secu…
-
Low 2.8
Unbound: null pointer dereference in unbound
DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer, NLnet Labs) falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a secu…