client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade connman | Apr 24, 2023 | Apr 12, 2023 |
| Suse | — | Upgrade connman-develUpgrade connman-plugin-l2tpUpgrade connman-clientUpgrade connman-testUpgrade connman-plugin-tistUpgrade connman-plugin-wireguardUpgrade connman-docUpgrade connman-plugin-hh2serial-gpsUpgrade connmanUpgrade connman-plugin-polkitUpgrade connman-nmcompatUpgrade connman-plugin-openvpnUpgrade connman-plugin-iospmUpgrade connman-plugin-vpncUpgrade connman-plugin-pptp | Nov 15, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade connmanUpgrade connman (Ubuntu Pro) | Jul 20, 2023 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub