client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade connman | Apr 24, 2023 | Apr 12, 2023 |
| Suse | — | Upgrade connman-testUpgrade connman-clientUpgrade connman-plugin-tistUpgrade connman-plugin-wireguardUpgrade connmanUpgrade connman-develUpgrade connman-docUpgrade connman-plugin-polkitUpgrade connman-plugin-l2tpUpgrade connman-plugin-hh2serial-gpsUpgrade connman-nmcompatUpgrade connman-plugin-iospmUpgrade connman-plugin-vpncUpgrade connman-plugin-pptpUpgrade connman-plugin-openvpn | Nov 15, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade connmanUpgrade connman (Ubuntu Pro) | Jul 20, 2023 | Apr 12, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub