Intel Connman vulnerabilities
10 vulnerabilities
Known vulnerabilities in Intel Connman, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2023-28488intel · connman +8 moreintel connmanclient.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.CVSS6.5MediumEPSS0.96%PrioritiseCVE-2022-32293debian · debian_linux +3 moredebian debian_linuxIn ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.CVSS8.1HighEPSS2.05%PrioritiseCVE-2022-32292debian · debian_linux +3 moredebian debian_linuxIn ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code.CVSS9.8CriticalEPSS3.28%PrioritiseCVE-2022-23098debian · debian_linux +4 moredebian debian_linuxAn issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received.CVSS7.5HighEPSS2.48%PrioritiseCVE-2022-23097debian · debian_linux +4 moredebian debian_linuxAn issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.CVSS9.1CriticalEPSS2.37%PrioritiseCVE-2022-23096debian · debian_linux +4 moredebian debian_linuxAn issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read.CVSS9.1CriticalEPSS2.60%RoutineCVE-2021-26676debian · debian_linux +5 moredebian debian_linuxgdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp.CVSS6.5MediumEPSS1.18%RoutineCVE-2021-26675debian · debian_linux +5 moredebian debian_linuxA stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.CVSS8.8HighEPSS1.36%PrioritiseCVE-2017-12865debian · debian_linux +5 moredebian debian_linuxStack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" variable.CVSS9.8CriticalEPSS5.52%RoutineCVE-2012-6459intel · connman +1 moreintel connmanConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth packets.CVSS4.3MediumEPSS1.11%