VulnSocial

CVE-2026-47183Disclosure(paulsm / zeroconf)

LOWCVSS 6.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch paulsm zeroconf systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming._log_exception_debug and the four QuietLogger exception-dedup methods stored an unbounded _seen_logs dictionary keyed by attacker-influenced IncomingDecodeError messages, retaining sys.exc_info() tracebacks whose frame locals kept raw packet self.data buffers and allowing unauthenticated hosts on the local link over UDP/5353 (224.0.0.251 / ff02::fb) to drive memory growth until mDNS-dependent features degrade or the process is OOM-killed. This issue is fixed in version 0.149.6.

paulsm CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-400

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • zeroconf

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
paulsm
Products
zeroconf

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-17: 2Patch / Workaround · 2026-07-17: 1Technical Details · 2026-07-17: 107-17
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-47183 Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming._log_exception_debug and the four QuietLogger exception-ded… https://www.cve.org/CVERecord?id=CVE-2026-47183 ----- Traducción: CVE-2026-47183 Zer… http://infoflow.cloud`

    Post summary

    The message announces CVE‑2026‑47183, a flaw in Zeroconf's pure Python DNS service discovery implementation before version 0.149.6, and provides a link to the CVE record.

    0000032
    92 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-47183 Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming._log_exception_debug and the four QuietLogger exception-ded… https://www.cve.org/CVERecord?id=CVE-2026-47183

    Post summary

    The passage identifies a CVE affecting the Zeroconf Python library, citing affected code paths and a version that likely fixes the flaw, but provides no exploit evidence or remediation steps beyond the version note.

    00000738
    57.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apppaulsmzeroconf-python-

Explore more

Back to dashboardpaulsm CVEszeroconf vulnerabilities