CyberRota Analysis
AI-GeneratedPi-hole versions 6.0 to 6.4.2 are vulnerable to a local privilege escalation flaw that allows an unprivileged user with code execution to gain root access by manipulating the logrotate configuration file. This vulnerability can lead to unauthorized control over the system, posing significant security risks. Organizations using affected versions should prioritize upgrading to version 6.4.3 to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root ownership by pihole-FTL-prestart.sh and then parsed as root by the daily pihole flush cron, executing firstaction shell as uid 0. This issue is fixed in version 6.4.3.
Related CVEs
Other vulnerabilities affecting the same vendor(s)