Vulnerabilities > CVE-2021-32706 - Unspecified vulnerability in Pi-Hole

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

pi-hole

NVD

Published: 2021-08-04

Updated: 2022-04-25

Summary

Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the `validDomainWildcard` preg_match filter allows a malicious character through that can be used to execute code, list directories, and overwrite sensitive files. The issue lies in the fact that one of the periods is not escaped, allowing any character to be used in its place. A patch for this vulnerability was released in version 5.5.1.

Vulnerable Configurations

Part	Description	Count
Application	Pi-Hole PI Hole PI Hole 2.0 PI Hole PI Hole 2.1 PI Hole PI Hole 2.2 PI Hole PI Hole 2.3 PI Hole PI Hole 2.4 PI Hole PI Hole 2.5 PI Hole PI Hole 2.5.1 PI Hole PI Hole 2.5.2 PI Hole PI Hole 2.5.3 PI Hole PI Hole 2.6 PI Hole PI Hole 2.6.1 PI Hole PI Hole 2.6.1.1 PI Hole PI Hole 2.6.1.2 PI Hole PI Hole 2.6.2 PI Hole PI Hole 2.6.3 PI Hole PI Hole 2.7 PI Hole PI Hole 2.7.1 PI Hole PI Hole 2.8 PI Hole PI Hole 2.8.1 PI Hole PI Hole 2.9 PI Hole PI Hole 2.9.1 PI Hole PI Hole 2.9.2 PI Hole PI Hole 2.9.3 PI Hole PI Hole 2.9.4 PI Hole PI Hole 2.9.5 PI Hole PI Hole 2.10 PI Hole PI Hole 2.10.2 PI Hole PI Hole 2.11 PI Hole PI Hole 2.11.1 PI Hole PI Hole 2.11.2 PI Hole PI Hole 2.12 PI Hole PI Hole 2.12.1 PI Hole PI Hole 2.13 PI Hole PI Hole 2.13.1 PI Hole PI Hole 2.13.2 PI Hole PI Hole 3.0 PI Hole PI Hole 3.0.1 PI Hole PI Hole 3.1 PI Hole PI Hole 3.1.4 PI Hole PI Hole 3.2 PI Hole PI Hole 3.2.1 PI Hole PI Hole 3.3 PI Hole PI Hole 3.3.1 PI Hole PI Hole 4.0 PI Hole PI Hole 4.1 PI Hole PI Hole 4.1.1 PI Hole PI Hole 4.2 PI Hole PI Hole 4.2.1 PI Hole PI Hole 4.2.2 PI Hole PI Hole 4.3 PI Hole PI Hole 4.3.1 PI Hole PI Hole 4.3.2 PI Hole PI Hole 4.3.3 PI Hole PI Hole 4.3.4 PI Hole PI Hole 4.3.5 PI Hole PI Hole 4.4 PI Hole PI Hole 5.0 PI Hole PI Hole 5.1 PI Hole PI Hole 5.1.1 PI Hole PI Hole 5.2 PI Hole PI Hole 5.2.1 PI Hole PI Hole 5.2.2 PI Hole PI Hole 5.2.3 PI Hole PI Hole 5.2.4 PI Hole PI Hole 5.3 PI Hole PI Hole 5.3.1 PI Hole PI Hole 5.3.2 PI Hole PI Hole 5.4 PI Hole PI Hole 5.5	69

Summary

Vulnerable Configurations

References