A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade connman | Aug 22, 2024 | Feb 9, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2021 |
| Debian | — | Upgrade connman | Feb 10, 2021 | Feb 10, 2021 |
| Gentoo Linux | — | Upgrade net-misc/connman. | Jul 13, 2021 | Feb 9, 2021 |
| Suse | — | Upgrade connmanUpgrade connman-plugin-hh2serial-gpsUpgrade connman-docUpgrade connman-clientUpgrade connman-plugin-polkitUpgrade connman-plugin-openconnectUpgrade connman-plugin-wireguardUpgrade connman-plugin-pptpUpgrade connman-plugin-tistUpgrade connman-develUpgrade connman-plugin-l2tpUpgrade connman-plugin-iospmUpgrade connman-plugin-vpncUpgrade connman-testUpgrade connman-nmcompatUpgrade connman-plugin-openvpn | Mar 17, 2021 | Feb 9, 2021 |
| Ubuntu | — | Upgrade connmanUpgrade connman (Ubuntu Pro) | Jul 20, 2023 | Feb 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub