CVE-2026-48487

Katalog CVE

CVSS 5.3 · Medium EPSS 0,47%

Kerentanan Improper Handling of Length Parameter Inconsistency pada paulsm zeroconf. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, _read_character_string and _read_string in src/zeroconf/_protocol/incoming.py advanced self.offset by attacker-declared RDLENGTH without checking it against self._data_len, allowing unauthenticated hosts on the local link over UDP/5353 (224.0.0.251 / ff02::fb) to send a TXT, HINFO, or A/AAAA record with rdlength=65535 and seed DNSCache and ServiceInfo.properties with truncated, attacker-shaped key/value or address records. This issue is fixed in version 0.149.16.

Rincian

Terbit di NVD

17 Juli 2026

Terakhir diubah

17 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-130: Improper Handling of Length Parameter Inconsistency

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 38,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/python-zeroconf/python-zeroconf/security/advisories/GHSA-qc2x-6f54-m6h9 advisory vendor
• https://github.com/python-zeroconf/python-zeroconf/commit/544449596e645fcaad3834fa0cb614a54f847a82 patch
• https://github.com/python-zeroconf/python-zeroconf/issues/1752 issue tracking · patch
• https://github.com/python-zeroconf/python-zeroconf/pull/1756 issue tracking · patch
• https://github.com/python-zeroconf/python-zeroconf/releases/tag/0.149.16 release notes