CVE-2026-48045— Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
Possible ATT&CK Techniques 1AI
T1496 · Resource HijackingAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| python-zeroconf | python-zeroconf | < 0.149.12 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-48045
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
Source: CVE Program / CVE List V5
Vulnerability Description
Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handle_query_or_defer retained every truncated TC-bit incoming query, each up to _MAX_MSG_ABSOLUTE = 8966 bytes, in self._deferred[addr] and armed a per-address timer in self._timers[addr] without capping the per-address list or distinct addr keys, allowing unauthenticated hosts on the local link over UDP/5353 (224.0.0.251 / ff02::fb) to spoof sources, grow _deferred and _timers, and cause memory exhaustion and quadratic CPU burn. This issue is fixed in version 0.149.12.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5
Vulnerability Title
python-zeroconf 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
python-zeroconf python-zeroconf是python-zeroconf组织的一个实现Zeroconf协议的库 python-zeroconf 0.149.12之前版本存在资源管理错误漏洞，该漏洞源于AsyncListener.handle_query_or_defer未限制每地址列表或不同addr键，可能导致未经过身份验证的主机通过本地链接上的UDP/5353伪造源，造成内存耗尽和CPU过度消耗。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| python-zeroconf | python-zeroconf | < 0.149.12 | - |
II. Public POCs for CVE-2026-48045
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-48045
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-48045 (2)
Vendor Advisories for CVE-2026-48045 (1)
Vendor Pages for CVE-2026-48045 (1)
Same Patch Batch · python-zeroconf · 2026-07-17 · 5 CVEs total
| CVE-2026-47183 | 6.5 MEDIUM | Zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame local |
| CVE-2026-47180 | 6.5 MEDIUM | Zeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial o |
| CVE-2026-47184 | 6.5 MEDIUM | Zeroconf: Unbounded DNS record cache allows LAN-local memory exhaustion via multicast floo |
| CVE-2026-48487 | Zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption |
IV. Related Vulnerabilities
Same product: python-zeroconf
Same vendor: python-zeroconf
Same weakness: CWE-770
- CVE-2026-13069
Queryable Encryption FLE2 Find Payload Missing Input Validat - CVE-2026-13074
Awaitable Hello Command in Exhaust Mode Unthrottled Response - CVE-2026-13075
$rankFusion and $scoreFusion Unbounded Memory Allocation Dur - CVE-2026-13076
Aggregation Framework Memory Exhaustion Leading to Process T - CVE-2026-65650
Elgg 7.0.0以下版本头像上传拒绝服务漏洞
V. Comments for CVE-2026-48045
No comments yet