In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 3, 2022 |
| Debian | — | Upgrade connman | Sep 14, 2022 | Aug 3, 2022 |
| Gentoo Linux | — | Upgrade net-misc/connman. | Nov 1, 2023 | Aug 3, 2022 |
| Suse | — | Upgrade connman-plugin-iospmUpgrade connman-testUpgrade connman-plugin-l2tpUpgrade connman-plugin-wireguardUpgrade connman-plugin-tistUpgrade connman-nmcompatUpgrade connman-plugin-vpncUpgrade connman-docUpgrade connman-plugin-openvpnUpgrade connman-plugin-pptpUpgrade connman-plugin-hh2serial-gpsUpgrade connman-plugin-polkitUpgrade connman-clientUpgrade connmanUpgrade connman-devel | Oct 26, 2022 | Aug 3, 2022 |
| Ubuntu | — | Upgrade connman (Ubuntu Pro)Upgrade connman | Jul 20, 2023 | Aug 3, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub