A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade connman | Aug 22, 2024 | Feb 9, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2021 |
| Debian | — | Upgrade connman | Feb 10, 2021 | Feb 10, 2021 |
| Gentoo Linux | — | Upgrade net-misc/connman. | Jul 13, 2021 | Feb 9, 2021 |
| Suse | — | Upgrade connman-plugin-openvpnUpgrade connman-nmcompatUpgrade connman-plugin-vpncUpgrade connman-plugin-l2tpUpgrade connman-testUpgrade connman-develUpgrade connman-plugin-iospmUpgrade connman-docUpgrade connman-plugin-openconnectUpgrade connman-clientUpgrade connman-plugin-polkitUpgrade connman-plugin-hh2serial-gpsUpgrade connmanUpgrade connman-plugin-tistUpgrade connman-plugin-pptpUpgrade connman-plugin-wireguard | Mar 17, 2021 | Feb 9, 2021 |
| Ubuntu | — | Upgrade connman (Ubuntu Pro)Upgrade connman | Jul 20, 2023 | Feb 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub