CVE-2024-43168 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-43168 Interim 1 8 2025-02-16T00:56:44Z current 2024-08-07T23:10:13Z 2025-02-16T00:56:44Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-43168 DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer, NLnet Labs) falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet Labs has no further information about the claim, and suggests that affected Red Hat customers refer to available Red Hat documentation or support channels. ORIGINAL DESCRIPTION: A heap-buffer-overflow flaw was found in the cfg_mark_ports function within Unbound's config_file.c, which can lead to memory corruption. This issue could allow an attacker with local access to provide specially crafted input, potentially causing the application to crash or allowing arbitrary code execution. This could result in a denial of service or unauthorized actions on the system. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Micro 6.1 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 libunbound2 libunbound8 unbound unbound-anchor unbound-devel unbound-munin unbound-python libunbound2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libunbound8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS unbound-anchor as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS unbound-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS unbound as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libunbound2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libunbound8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS unbound-anchor as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS unbound-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS unbound as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libunbound2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libunbound8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS unbound-anchor as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS unbound-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS unbound as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libunbound2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libunbound8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS unbound-anchor as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS unbound-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS unbound as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libunbound2 as a component of SUSE Linux Enterprise Micro 5.5 libunbound8 as a component of SUSE Linux Enterprise Micro 5.5 unbound-anchor as a component of SUSE Linux Enterprise Micro 5.5 unbound as a component of SUSE Linux Enterprise Micro 5.5 libunbound2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libunbound8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 unbound-anchor as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 unbound-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 unbound as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libunbound2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libunbound8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 unbound-anchor as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 unbound-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 unbound as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 unbound as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 unbound-python as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 unbound as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 unbound-python as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libunbound2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS unbound-anchor as a component of SUSE Linux Enterprise Server 15 SP1-LTSS unbound-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS unbound as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libunbound2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libunbound8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS unbound-anchor as a component of SUSE Linux Enterprise Server 15 SP2-LTSS unbound-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS unbound as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libunbound2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libunbound8 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS unbound-anchor as a component of SUSE Linux Enterprise Server 15 SP3-LTSS unbound-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS unbound as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libunbound2 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libunbound8 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS unbound-anchor as a component of SUSE Linux Enterprise Server 15 SP4-LTSS unbound-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS unbound as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libunbound2 as a component of SUSE Linux Enterprise Server 15-LTSS unbound-anchor as a component of SUSE Linux Enterprise Server 15-LTSS unbound-devel as a component of SUSE Linux Enterprise Server 15-LTSS unbound as a component of SUSE Linux Enterprise Server 15-LTSS unbound as a component of SUSE Linux Enterprise Server Teradata 15 SP4 libunbound2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libunbound8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 unbound-anchor as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 unbound-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 unbound as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libunbound2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libunbound8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 unbound-anchor as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 unbound-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 unbound as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libunbound2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libunbound8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 unbound-anchor as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 unbound-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 unbound as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libunbound8 as a component of SUSE Linux Micro 6.1 unbound-anchor as a component of SUSE Linux Micro 6.1 unbound as a component of SUSE Linux Micro 6.1 libunbound2 as a component of SUSE Manager Proxy 4.3 libunbound8 as a component of SUSE Manager Proxy 4.3 unbound-anchor as a component of SUSE Manager Proxy 4.3 unbound-devel as a component of SUSE Manager Proxy 4.3 unbound as a component of SUSE Manager Proxy 4.3 libunbound2 as a component of SUSE Manager Retail Branch Server 4.3 libunbound8 as a component of SUSE Manager Retail Branch Server 4.3 unbound-anchor as a component of SUSE Manager Retail Branch Server 4.3 unbound-devel as a component of SUSE Manager Retail Branch Server 4.3 unbound as a component of SUSE Manager Retail Branch Server 4.3 libunbound2 as a component of SUSE Manager Server 4.3 libunbound8 as a component of SUSE Manager Server 4.3 unbound-anchor as a component of SUSE Manager Server 4.3 unbound-devel as a component of SUSE Manager Server 4.3 unbound as a component of SUSE Manager Server 4.3 libunbound2 as a component of openSUSE Leap 15.5 libunbound8 as a component of openSUSE Leap 15.5 unbound as a component of openSUSE Leap 15.5 unbound-anchor as a component of openSUSE Leap 15.5 unbound-devel as a component of openSUSE Leap 15.5 unbound-munin as a component of openSUSE Leap 15.5 unbound-python as a component of openSUSE Leap 15.5 libunbound2 as a component of openSUSE Leap 15.6 libunbound8 as a component of openSUSE Leap 15.6 unbound as a component of openSUSE Leap 15.6 unbound-anchor as a component of openSUSE Leap 15.6 unbound-devel as a component of openSUSE Leap 15.6 unbound-munin as a component of openSUSE Leap 15.6 unbound-python as a component of openSUSE Leap 15.6 DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer, NLnet Labs) falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet Labs has no further information about the claim, and suggests that affected Red Hat customers refer to available Red Hat documentation or support channels. ORIGINAL DESCRIPTION: A heap-buffer-overflow flaw was found in the cfg_mark_ports function within Unbound's config_file.c, which can lead to memory corruption. This issue could allow an attacker with local access to provide specially crafted input, potentially causing the application to crash or allowing arbitrary code execution. This could result in a denial of service or unauthorized actions on the system. CVE-2024-43168 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libunbound2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libunbound8 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:unbound SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:unbound-anchor SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:unbound-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libunbound2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libunbound8 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:unbound SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:unbound-anchor SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:unbound-devel SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libunbound2 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libunbound8 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:unbound SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:unbound-anchor SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:unbound-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libunbound2 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libunbound8 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:unbound SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:unbound-anchor SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:unbound-devel SUSE Linux Enterprise Micro 5.5:libunbound2 SUSE Linux Enterprise Micro 5.5:libunbound8 SUSE Linux Enterprise Micro 5.5:unbound SUSE Linux Enterprise Micro 5.5:unbound-anchor SUSE Linux Enterprise Module for Basesystem 15 SP5:libunbound2 SUSE Linux Enterprise Module for Basesystem 15 SP5:libunbound8 SUSE Linux Enterprise Module for Basesystem 15 SP5:unbound SUSE Linux Enterprise Module for Basesystem 15 SP5:unbound-anchor SUSE Linux Enterprise Module for Basesystem 15 SP5:unbound-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:libunbound2 SUSE Linux Enterprise Module for Basesystem 15 SP6:libunbound8 SUSE Linux Enterprise Module for Basesystem 15 SP6:unbound SUSE Linux Enterprise Module for Basesystem 15 SP6:unbound-anchor SUSE Linux Enterprise Module for Basesystem 15 SP6:unbound-devel SUSE Linux Enterprise Module for Package Hub 15 SP5:unbound SUSE Linux Enterprise Module for Package Hub 15 SP5:unbound-python SUSE Linux Enterprise Module for Package Hub 15 SP6:unbound SUSE Linux Enterprise Module for Package Hub 15 SP6:unbound-python SUSE Linux Enterprise Server 15 SP2-LTSS:libunbound2 SUSE Linux Enterprise Server 15 SP2-LTSS:libunbound8 SUSE Linux Enterprise Server 15 SP2-LTSS:unbound SUSE Linux Enterprise Server 15 SP2-LTSS:unbound-anchor SUSE Linux Enterprise Server 15 SP2-LTSS:unbound-devel SUSE Linux Enterprise Server 15 SP3-LTSS:libunbound2 SUSE Linux Enterprise Server 15 SP3-LTSS:libunbound8 SUSE Linux Enterprise Server 15 SP3-LTSS:unbound SUSE Linux Enterprise Server 15 SP3-LTSS:unbound-anchor SUSE Linux Enterprise Server 15 SP3-LTSS:unbound-devel SUSE Linux Enterprise Server 15 SP4-LTSS:libunbound2 SUSE Linux Enterprise Server 15 SP4-LTSS:libunbound8 SUSE Linux Enterprise Server 15 SP4-LTSS:unbound SUSE Linux Enterprise Server 15 SP4-LTSS:unbound-anchor SUSE Linux Enterprise Server 15 SP4-LTSS:unbound-devel SUSE Linux Enterprise Server Teradata 15 SP4:unbound SUSE Linux Enterprise Server for SAP Applications 15 SP2:libunbound2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libunbound8 SUSE Linux Enterprise Server for SAP Applications 15 SP2:unbound SUSE Linux Enterprise Server for SAP Applications 15 SP2:unbound-anchor SUSE Linux Enterprise Server for SAP Applications 15 SP2:unbound-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:libunbound2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libunbound8 SUSE Linux Enterprise Server for SAP Applications 15 SP3:unbound SUSE Linux Enterprise Server for SAP Applications 15 SP3:unbound-anchor SUSE Linux Enterprise Server for SAP Applications 15 SP3:unbound-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:libunbound2 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libunbound8 SUSE Linux Enterprise Server for SAP Applications 15 SP4:unbound SUSE Linux Enterprise Server for SAP Applications 15 SP4:unbound-anchor SUSE Linux Enterprise Server for SAP Applications 15 SP4:unbound-devel SUSE Linux Micro 6.1:libunbound8 SUSE Linux Micro 6.1:unbound SUSE Linux Micro 6.1:unbound-anchor SUSE Manager Proxy 4.3:libunbound2 SUSE Manager Proxy 4.3:libunbound8 SUSE Manager Proxy 4.3:unbound SUSE Manager Proxy 4.3:unbound-anchor SUSE Manager Proxy 4.3:unbound-devel SUSE Manager Retail Branch Server 4.3:libunbound2 SUSE Manager Retail Branch Server 4.3:libunbound8 SUSE Manager Retail Branch Server 4.3:unbound SUSE Manager Retail Branch Server 4.3:unbound-anchor SUSE Manager Retail Branch Server 4.3:unbound-devel SUSE Manager Server 4.3:libunbound2 SUSE Manager Server 4.3:libunbound8 SUSE Manager Server 4.3:unbound SUSE Manager Server 4.3:unbound-anchor SUSE Manager Server 4.3:unbound-devel openSUSE Leap 15.5:libunbound2 openSUSE Leap 15.5:libunbound8 openSUSE Leap 15.5:unbound openSUSE Leap 15.5:unbound-anchor openSUSE Leap 15.5:unbound-devel openSUSE Leap 15.5:unbound-munin openSUSE Leap 15.5:unbound-python openSUSE Leap 15.6:libunbound2 openSUSE Leap 15.6:libunbound8 openSUSE Leap 15.6:unbound openSUSE Leap 15.6:unbound-anchor openSUSE Leap 15.6:unbound-devel openSUSE Leap 15.6:unbound-munin openSUSE Leap 15.6:unbound-python important 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H