Threats tagged 'ghsa-f34v-4q4f-pf5q'

CVE-2024-43167 is a NULL pointer dereference vulnerability in the ub_ctx_set_fwd function of Unbound. This flaw occurs when certain API calls, such as ub_ctx_set_fwd and ub_ctx_resolvconf, are invoked in a specific order, causing the program to dereference a NULL pointer and crash. The resulting segmentation fault leads to a denial of service by unexpectedly terminating the application. The vulnerability has a low CVSS score of 2.8 and requires local attacker privileges with user interaction. No patch or mitigation is currently available that meets Red Hat's criteria for ease of use and deployment.