In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 3, 2022 |
| Debian | — | Upgrade connman | Sep 14, 2022 | Aug 3, 2022 |
| Gentoo Linux | — | Upgrade net-misc/connman. | Nov 1, 2023 | Aug 3, 2022 |
| Suse | — | Upgrade connman-develUpgrade connman-plugin-hh2serial-gpsUpgrade connman-plugin-pptpUpgrade connman-docUpgrade connman-plugin-openvpnUpgrade connman-plugin-polkitUpgrade connmanUpgrade connman-clientUpgrade connman-plugin-vpncUpgrade connman-plugin-tistUpgrade connman-testUpgrade connman-plugin-wireguardUpgrade connman-nmcompatUpgrade connman-plugin-iospmUpgrade connman-plugin-l2tp | Oct 26, 2022 | Aug 3, 2022 |
| Ubuntu | — | Upgrade connmanUpgrade connman (Ubuntu Pro) | Jul 20, 2023 | Aug 3, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub