high7.5
CVE-2022-23098
An issue was discovered in the DNS proxy in Connman through 1.40.
Impact
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Connman | through 1.40 |
| Debian | Debian Linux | Versions 9.0, 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://git.kernel.org/pub/scm/network/connman/connman.git/log/
- https://lists.debian.org/debian-lts-announce/2022/02/msg00009.html
- https://security.gentoo.org/glsa/202310-21
- https://www.debian.org/security/2022/dsa-5231
- https://www.openwall.com/lists/oss-security/2022/01/25/1
- https://git.kernel.org/pub/scm/network/connman/connman.git/log/
- https://lists.debian.org/debian-lts-announce/2022/02/msg00009.html
- https://security.gentoo.org/glsa/202310-21
- https://www.debian.org/security/2022/dsa-5231
- https://www.openwall.com/lists/oss-security/2022/01/25/1