CVE-2017-12865

概要

参考情報

• debian.org/security/2017/dsa-3956 · Third Party Advisory
• securityfocus.com/bid/100498 · Third Party Advisory
• 01.org/security/intel-oss-10001/intel-oss-10001 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• git.kernel.org/pub/scm/network/connman/connman.git/commit · Issue Tracking
• security.gentoo.org/glsa/201812-02 · Third Party Advisory
• nri-secure.com/blog/new-iot-vulnerability-connmando · Third Party Advisory

connman のその他の脆弱性

• CVE-2023-28488中 6.5client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-bas…
• CVE-2022-32293高 8.1In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, …
• CVE-2022-32292緊急 9.8In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow …
• CVE-2022-23098高 7.5An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is rec…
• CVE-2022-23097緊急 9.1An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds r…