17 results · Feed
-
High 7.6
ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/c…
-
Critical 9.0
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Trunc…
-
Medium 4.8
In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., *rdlen=…
-
Medium 6.5
client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server)…
-
Unscored —
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-b…
-
Unscored —
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-fre…
-
Unscored —
An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading …
-
Unscored —
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite l…
-
Critical 9.1
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for…
-
Unscored —
ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NA…
-
Unscored —
gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing …
-
Unscored —
A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute…
-
Unscored —CVE-2017-12865 Public exploit
Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of se…
-
Unscored —
ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow rem…
-
Unscored —
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to b…
-
Unscored —
The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharact…
-
Unscored —
Integer overflow in the dhcpv6_get_option function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to …