CVE-2022-23098

Mô tả

Tham khảo

• git.kernel.org/pub/scm/network/connman/connman.git/log · Product
• lists.debian.org/debian-lts-announce/2022/02/msg00009.html · Mailing List
• security.gentoo.org/glsa/202310-21 · Third Party Advisory
• debian.org/security/2022/dsa-5231 · Third Party Advisory
• openwall.com/lists/oss-security/2022/01/25/1 · Exploit

Lỗ hổng khác của connman

• CVE-2023-28488TRUNG BÌNH 6.5client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-bas…
• CVE-2022-32293CAO 8.1In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, …
• CVE-2022-32292NGHIÊM TRỌNG 9.8In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow …
• CVE-2022-23097NGHIÊM TRỌNG 9.1An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds r…
• CVE-2022-23096NGHIÊM TRỌNG 9.1An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of suff…