A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade connman | Aug 22, 2024 | Feb 9, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2021 |
| Debian | — | Upgrade connman | Feb 10, 2021 | Feb 10, 2021 |
| Gentoo Linux | — | Upgrade net-misc/connman. | Jul 13, 2021 | Feb 9, 2021 |
| Suse | — | Upgrade connman-plugin-iospmUpgrade connman-develUpgrade connman-plugin-vpncUpgrade connman-testUpgrade connman-plugin-openvpnUpgrade connman-nmcompatUpgrade connman-plugin-l2tpUpgrade connman-plugin-hh2serial-gpsUpgrade connman-plugin-wireguardUpgrade connman-plugin-tistUpgrade connmanUpgrade connman-plugin-pptpUpgrade connman-plugin-polkitUpgrade connman-clientUpgrade connman-docUpgrade connman-plugin-openconnect | Mar 17, 2021 | Feb 9, 2021 |
| Ubuntu | — | Upgrade connmanUpgrade connman (Ubuntu Pro) | Jul 20, 2023 | Feb 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub