critical9.1
CVE-2022-23096
An issue was discovered in the DNS proxy in Connman through 1.40.
Impact
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Connman | through 1.40 |
| Debian | Debian Linux | Versions 9.0, 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://git.kernel.org/pub/scm/network/connman/connman.git/log/
- https://lists.debian.org/debian-lts-announce/2022/02/msg00009.html
- https://security.gentoo.org/glsa/202310-21
- https://www.debian.org/security/2022/dsa-5231
- https://www.openwall.com/lists/oss-security/2022/01/25/1
- https://git.kernel.org/pub/scm/network/connman/connman.git/log/
- https://lists.debian.org/debian-lts-announce/2022/02/msg00009.html
- https://security.gentoo.org/glsa/202310-21
- https://www.debian.org/security/2022/dsa-5231
- https://www.openwall.com/lists/oss-security/2022/01/25/1