CVE-2021-29449mediumCWE-269

CVE-2021-29449: falha de média gravidade em pi-hole

Multiple Privilege Escalation Vulnerabilities Pihole

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar pi-hole

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendcvss 6.3epss 1.8%
da publicação à arma6 dias
Publicada no NVD14 de abr.
metasploit+6d
Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for details.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Produtos afetados
pi-hole · pi-hole
CVEs relacionadas — pi-hole

No mesmo produto, das mais perigosas para as menos.

CVE-2024-34361HIGHPi-hole Blind Server-Side Request Forgery (SSRF) vulnerability can lead to Remote Code Execution (RCE)EPSS 2.8%CVE-2024-28247HIGHPihole Authenticated Arbitrary File Read with root privilegesEPSS 1.4%CVE-2026-119334LOWPi-hole: file:// adlist read check and curl can resolve different filesEPSS 0.3%CVE-2026-50130HIGHPi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`EPSS 0.3%CVE-2026-119336HIGHPi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlinkEPSS 0.2%CVE-2026-119335HIGHPi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypassEPSS 0.2%