CVE-2021-29449mediumCWE-269

CVE-2021-29449: fallo de gravedad media en pi-hole

Multiple Privilege Escalation Vulnerabilities Pihole

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear pi-hole

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendcvss 6.3epss 1.8%
de la publicación al arma6 días
Publicada en NVD14 abr
metasploit+6d
Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for details.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Productos afectados
pi-hole · pi-hole
CVEs relacionadas — pi-hole

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-34361HIGHPi-hole Blind Server-Side Request Forgery (SSRF) vulnerability can lead to Remote Code Execution (RCE)EPSS 2.8%CVE-2024-28247HIGHPihole Authenticated Arbitrary File Read with root privilegesEPSS 1.4%CVE-2026-119334LOWPi-hole: file:// adlist read check and curl can resolve different filesEPSS 0.3%CVE-2026-50130HIGHPi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`EPSS 0.3%CVE-2026-119336HIGHPi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlinkEPSS 0.2%CVE-2026-119335HIGHPi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypassEPSS 0.2%