PT-2020-14097 · Pi-Hole · Pi-Hole

Spartacvs · Published 2020-06-23 · Updated 2021-07-21 · CVE-2020-14971

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pi-hole through 5.0

Description The issue allows code injection in the Static DHCP Leases section by modifying Teleporter backup files and then restoring them, which occurs in settings.php. An attacker can exploit this by requesting a backup of limited files via teleporter.php, modifying the host parameter in dnsmasq.d files, and then compressing and uploading these files again.

Recommendations For Pi-hole through 5.0, as a temporary workaround, consider restricting access to the Teleporter feature and the Static DHCP Leases section until a patch is available. Avoid using the host parameter in the dnsmasq.d files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2020-14971

Affected Products

Pi-Hole

References · 6

• https://github.com/pi-hole/AdminLTE/commit/c949516ee15fa6a9b0c8511cc4c4d6b0893f3e69 · Patch
• https://github.com/pi-hole/AdminLTE/commit/8f6e1365b6dec0ae1aa0b0b15b102c9133f347e5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-14971 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14971 · Vendor Advisory
• https://github.com/pi-hole/AdminLTE/pull/1443 · Note
• https://blog.telspace.co.za/2020/06/pi-hole-code-injection-cve-2020-14971.html · Note