PT-2026-26381 · Openwrt · Openwrt

Aparcar + 2 · Publicado 2026-03-19 · Atualizado 2026-03-20 · CVE-2026-30872

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenWrt Project versions prior to 24.10.6 OpenWrt Project versions prior to 25.12.1

Description The OpenWrt Project, a Linux operating system for embedded devices, contains a stack-based buffer overflow in the mdns daemon’s match ipv6 addresses function. This occurs when processing PTR queries for IPv6 reverse DNS domains (.ip6.arpa) received via multicast DNS on UDP port 5353. The issue arises because the strcpy function copies data into a fixed 256-byte stack buffer without proper length validation, and the reverse IPv6 request is extracted into a 46-byte buffer. An attacker can exploit this by sending a crafted DNS query exceeding 46 bytes, leading to an out-of-bounds write and potential remote code execution.

Recommendations Update to OpenWrt Project version 24.10.6 or later. Update to OpenWrt Project version 25.12.1 or later.

Exploit

Correção

RCE

Stack Overflow

Enumeração de Fraquezas

CWE-121

Identificadores relacionados

CVE-2026-30872

GHSA-MPGH-V658-JQV5

Produtos afetados

Openwrt

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30872.json · Exploit
• https://github.com/openwrt/openwrt/releases/tag/v25.12.1 · Nota
• https://github.com/openwrt/openwrt/security/advisories/GHSA-mpgh-v658-jqv5 · Aviso do Fabricante
• https://github.com/openwrt/openwrt/releases/tag/v24.10.6 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-30872 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-30872 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2034891619833360785 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/2034754067033972825 · Publicação no Twitter