Connman

connman

Vendor: Intel • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28488 1Intel 1Connman Feb 8, 2025 Apr 12, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.
CVE-2022-32293 2Debian Intel 2Connman Debian Linux Nov 21, 2024 Aug 3, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.
CVE-2022-32292 2Debian Intel 2Connman Debian Linux Nov 21, 2024 Aug 3, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code.
CVE-2022-23098 2Debian Intel 2Connman Debian Linux Nov 21, 2024 Jan 28, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received.
CVE-2022-23097 2Debian Intel 2Connman Debian Linux Nov 21, 2024 Jan 28, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.
CVE-2022-23096 2Debian Intel 2Connman Debian Linux Nov 21, 2024 Jan 28, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read.
CVE-2021-26676 3Debian IntelOpensuse 3Connman Debian LinuxLeap Nov 21, 2024 Feb 9, 2021 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp.
CVE-2021-26675 3Debian IntelOpensuse 3Connman Debian LinuxLeap Nov 21, 2024 Feb 9, 2021 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.
CVE-2017-12865 2Debian Intel 2Connman Debian Linux May 13, 2026 Aug 29, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" vari...Show more Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" variable.Show less
CVE-2012-6459 1Intel 1Connman Apr 29, 2026 Jan 1, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth packets.