Pi-Hole AdminLTE Remote Code Execution Vulnerability

概要

参考情報

• packetstormsecurity.com/files/157861/Pi-Hole-4.3.2-DHCP-MAC-OS-Command-Execution.html · Third Party Advisory
• packetstormsecurity.com/files/158737/Pi-hole-4.3.2-Remote-Code-Execution.html · Third Party Advisory
• pi-hole/AdminLTE · Patch
• pi-hole/AdminLTE#1165 · Patch
• pi-hole/AdminLTE release v4.3.3 · Release Notes
• natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution · Broken Link
• twitter.com/Nate_Kappa/status/1243900213665902592 · Broken Link
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2020-8816

pi-hole のその他の脆弱性

• CVE-2026-50130高 8.8Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user…
• CVE-2026-33727中 6.7Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privilege-escalation vulne…
• CVE-2025-34087高 8.8An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3. When adding a domain to the allowlist via the web int…
• CVE-2024-44069高 7.5Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dashboard. NOTE: the sup…
• CVE-2024-34361高 8.8Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versio…